What's new

Release ASUS RT-AX86U Firmware version 3.0.0.4.386.46061 (2022/01/11)

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

dark

Occasional Visitor
Version 3.0.0.4.386.46061
2022/01/11 75.31 MBytes
ASUS RT-AX86U Firmware version 3.0.0.4.386.46061
Security
- Fixed string format stacks vulnerability
- Fixed cross-site-scripting vulnerability
- Fixed informational vulnerability.
Thanks to Howard McGreehan.

-Fixed SQL injection vulnerability
-Fixed json file traversal vulnerability
-Fixed plc/port file traversal vulnerability
-Fixed stack overflow vulnerability
Thanks to HP of Cyber Kunlun Lab

-Fixed authenticated stored XSS vulnerability
Thanks to Luke Walker – SmartDCC

-Fixed LPD denial of service vulnerability
-Fixed cfgserver heap overflow vulnerability
-Fixed cfgserver denial of service vulnerability
Thanks to TianHe from BeFun Cyber Security Lab.

Added more ISP profile
Digi 1 - TM
Digi 2 - TIME
Digi 3 - Digi
Digi 4 - CTS
Digi 5 - ALLO
Digi 6 - SACOFA
Maxis - CTS
Maxis - SACOFA
Maxis - TNB/ALLO

Fixed AiMesh guest network issues.
Fixed DDNS issues where the WAN IP is IPv6
Fixed UI bugs in Administration --> feedback.
Fixed time zone error.
Improved the connection stability.
 
auto-updated for me last night, working fine...
 
Wasn't it in beta firmware only?
It was actually in the release for one build late summer/early fall if memory serves me. But, they took it out the next release due to a problem they didn’t disclose. I’ve never run a beta firmware.
 
Why not just link to the file?

In the interest of safe computing, I prefer to browse to the source page and select the download link myself. So I assume the same for others.

OE
 
Look at some of the other posts for firmware and you will see people post a link directly to the file from Asus.
Been that way for the 10 years I have been here and most likely before that.
All you have to do is verify the download source when the download window comes up.
The way you do it adds more clicks to get the same result.

View attachment 38532
In the greater scheme of things, it does not matter. Please focus on things that are helpful.
 
Just because others have been doing things incorrectly, it doesn't matter how long it has gone on, it is still incorrect (if you value your digital security).

I much prefer @OzarkEdge's method to links.
 
In the interest of safe computing, I prefer to browse to the source page and select the download link myself. So I assume the same for others.

OE

I like it even better that there's an md5 checksum that I can verify. That gives me a nice warm feeling *smile*.
 
I stated why I believe it is incorrect. You can believe what you like, but what I believe does matter.

The forum is certainly taking a downturn now.
 
This option can't be called DNSFilter in official Asuswrt. See what DNSFilter is:

That was the speculation as to why it was taken back out, since it was Merlin code that had been added. Regardless it still isn’t there and may not return, which is disappointing.
 

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top