Release ASUS RT-AC66U B1 Firmware version 3.0.0.4.386.45934

[bbunge]

Version 3.0.0.4.386.45934

2021/11/16 144.4 MBytes

ASUS RT-AC66U B1 Firmware version 3.0.0.4.386.45934
1. Fixed Let's encrypt related bugs.
2. Fixed httpd vulnerability
3. Fixed stack overflow vulnerability
4. Fixed DoS vulnerability
5. Fixed AiMesh web page multi-language issues.

https://dlcdnets.asus.com/pub/ASUS/wireless/RT-AC66U_B1/FW_RT_AC66U_B1_300438645934.zip

New feature is DNS over TLS in WAN/WAN DNS Setting/DNS Privacy Protocol

 

[gdp416]

Also...

6. Fixed Stored XSS vulnerability.
7. Fixed CVE-2021-41435, CVE-2021-41436.
Thanks to Efstratios Chatzoglou, University of the Aegean
Georgios Kambourakis, European Commission at the European Joint Research Centre
Constantinos Kolias, University of Idaho.
8. Fixed Stack overflow vulnerability. Thanks to Jixing Wang (@chamd5) contribution.
9. Fixed information disclosure vulnerability .Thanks to CataLpa from DBappSecurity Co.,Ltd Hatlab and 360 Alpha Lab contribution.


Auto-updated Monday night and no problems with it so far.

 

[PlayaSucia]

The last release was double in size, this one has tripled at 144.4 MB

 

[TurdleEggs]

I noticed two (or three) issues with 45934.

The Internet status showed disconnected, however was assigned a WAN IP and internet was functioning. ISP is StarLink.

NTP Time sync wasn’t working. Warning messages were Time Zone doesn’t match client and NTP Time Sync not working.

VoIP ATA couldn’t register.

Rolled back to 43129.

 

[gdp416]

From my experience with this new firmware...

• My router auto-upgraded the firmware on Nov 16th.
• Its internet status shows as Connected.
• When it rebooted after the upgrade, it synced the time okay. There have been no attempts at time sync since that time. I don't remember if that is the usual behavior or if there are supposed to be scheduled time syncs.
• I don't use VoIP so can't check that.