What's new

ASUS RT-AC87U Firmware version 3.0.0.4.382.50010

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

win465

Regular Contributor
ASUS RT-AC87U Firmware version 3.0.0.4.382.50010
Security fixed
-Fixed KRACK vulnerability
-Fixed CVE-2017-14491: DNS - 2 byte heap based overflow
-Fixed CVE-2017-14492: DHCP - heap based overflow
-Fixed CVE-2017-14493: DHCP - stack based overflow
-Fixed CVE-2017-14494: DHCP - info leak
-Fixed CVE-2017-14495: DNS - OOM DoS
-Fixed CVE-2017-14496: DNS - DoS Integer underflow
-Fixed CVE-2017-13704 : Bug collision
-Fixed predictable session tokens(CVE-2017-15654), logged user IP validation(CVE-2017-15653), Logged-in information disclosure (special thanks for Blazej Adamczyk contribution)
-Fixed web GUI authorization vulnerabilities.
-Fixed AiCloud XSS vulnerabilities
-Fixed XSS vulnerability. Thanks for Joaquim's contribution.
-Fixed LAN RCE vulnerability. An independent security researcher has reported this vulnerability to Beyond Security’s SecuriTeam Secure Disclosure program
-Fixed remote code execution vulnerability. Thanks to David Maciejak of Fortinet's FortiGuard Labs
-Fixed Smart Sync Stored XSS vulnerabilities. Thanks fo Guy Arazi's contribution.
-Fixed CVE-2018-5721 Stack-based buffer overflow.

New features
-HDD Hibernation
-URL filter black/white list
-Bandwidth limiter on guest network
-URL filter support https website

Bug fixed
-Fixed CTF related issues
-Fixed AiCloud smart sync issue.
-Fixed client icon modification issue when client name includes special characters.
-Fixed AiCloud smart sync problem.


http://dlcdnet.asus.com/pub/ASUS/wireless/RT-AC87U/FW_RT_AC87U_300438250010.ZIP

Source: https://www.asus.com/us/Networking/RTAC87U/HelpDesk_Download/
 
I wonder if that means Quantenna finally fixed the Krack exploit on the 5 GHz side of things... If they did, that would potentially imply a newer Quantenna firmware is involved, after all these years.
 
https blocking not work. I set AIProtection for adult protect, but https sites still work.
Anyone can confirm ?

now i know why....old bug with 382 branch with web & apps filter

87u.png


after device added then AIProtection crash,,,,,
 
Last edited:
https blocking not work. I set AIProtection for adult protect, but https sites still work.
Anyone can confirm ?
https blocking isn't related with ai protection. It use iptables.

Code:
iptables -I INPUT -i br0 -p udp --dport 53 -d 192.168.1.1 -m string --string "facebook" --algo bm -j DROP

iptables -I FORWARD -p tcp -m webstr --url "facebook" -j REJECT --reject-with tcp-reset

iptables -I FORWARD -i br0 -p udp --dport 53 -m string --string "facebook" --algo bm -j DROP
If you want to block adult category, dns filtering is the solution..(etc. opendns family shield)
 
@Odkrys
i mean about blocking porn https sites
 
with great support from vanic, my problem is gone.

THX Vanic.
 
What You think about this ?

87u_3.png
 
Last edited:
Higher RAM usage is normal due to the new, more advanced Trend Micro engine used starting with 382.

Interesting fact: the Quantenna firmware is unchanged. Makes me suspect that Quantenna might have stopped updating the firmware for that chip.
 
I wonder if that means Quantenna finally fixed the Krack exploit on the 5 GHz side of things... If they did, that would potentially imply a newer Quantenna firmware is involved, after all these years.

I'm sure you've seen it but QSR1000 is still listed on Quantenna's website which has been redone since I last saw it. This chip lives no doubt.
 
I'm sure you've seen it but QSR1000 is still listed on Quantenna's website which has been redone since I last saw it. This chip lives no doubt.

You can sell hardware without providing new software development tho.

Anyway, probably no Krack issue to fix for the RT-AC87U since the QTN radio can't be used in Repeater mode.
 

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top