What's new
  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

Release Asus RT-AX88U Firmware version 3.0.0.4.388_24333 (2025/09/01)

Mr Zippy

Occasional Visitor
Version 3.0.0.4.388_24333
67.83 MB
2025/09/01
SHA-256 :1988DDA2DCA47B013D1BF0524FF834291C2DDA067D1A0751BCEBCFA986862B27
Important: After installing this firmware, we strongly recommend performing a factory-default reset to activate every new security adjustment.

Security Enhancements
- Password Policy Upgrade – Minimum 10 characters with at least 1 letter, 1 digit and 1 special symbol, and no consecutive identical characters; hardens defense against brute-force attacks.
- HTTPS on 8443 – Management interface now served over TLS by default.
- UPnP Disabled – Universal Plug and Play starts in the off state for reduced surface exposure.
- AiCloud Authentication Hardening (CWE-287) – Added layered verification.
- Authentication Logic Refactor – Removed redundant code paths for a lean sign-in flow.
- Memory Safety Guard (CWE-476) – Introduced null-reference protections across critical services.
- Enhanced IPsec Parameter Validation – The existing input checks have been hardened
- Data Exposure Mitigation (CWE-200) – Reinforced controls on sensitive pathways.
- Detailed Audit Trails – Expanded logging within the authentication module.

System Improvements
- Connection Stability – Core algorithms refined for steadier links.
- Scheduling Accuracy – Timed tasks execute reliably under PPPoE, PPTP and L2TP WAN modes.
- Client List Maintenance – Resolved an issue that prevented offline devices from being removed from the client list.

Bug Fixes:
- Fixed abnormal client list.
- Fixed abnormal GUI behavior of Wireguard VPN.
- Fixed USB internet backup conflict with main WAN.
- Fixed abnormal WAN detection while AiDetection is enabled.
- Improved AdGuard DNS GUI issues.
- Fixed IPv6 related issues.
- Improved USB tether compatibility for pixel phones.

 
If I upgrade to this version, can I then save my config, reset the router to factory defaults (as recommended), then restore my backed up config? If so, will the restored config be complete, or will there be any areas that would require manual intervention?

I sure would hate to try and reconfigure my router from scratch.
 
If I upgrade to this version, can I then save my config, reset the router to factory defaults (as recommended), then restore my backed up config? If so, will the restored config be complete, or will there be any areas that would require manual intervention?

I sure would hate to try and reconfigure my router from scratch.
If you load a config file that was saved prior to performing the Asus suggested factory-default reset, it is likely the new security adjustments may not be applied due to the CFG will have loaded the old pre reset settings. The question about not wanting to manually reconfigure and use an old CFG file has come up repeatedly with this latest Asus firmware release across a number of recent Release discussions in this subforum. Here is how the Asus-Merlin developer responded to a similar question:
Reloading that config will completely overwrite the changes done by the factory default reset. So you'd be back to the same point as before.
Some are choosing not to factory reset and keep their old settings, others are factory resetting and manually configuring. Choice is yours.
 
If I upgrade to this version, can I then save my config, reset the router to factory defaults (as recommended), then restore my backed up config? If so, will the restored config be complete, or will there be any areas that would require manual intervention?

I sure would hate to try and reconfigure my router from scratch.

FW Reset FAQ

Reset button/webUI Restore/node removal clears settings in NVRAM; reboot restores fw defaults from CFE

Hard Reset via WPS button/webUI Restore+Initialize also clears data logged in /jffs partition

OE
 
>- Password Policy Upgrade – Minimum 10 characters with at least 1 letter, 1 digit and 1 special symbol, and no consecutive identical
>characters; hardens defense against brute-force attacks.


Anybody upgraded yet? Just to be clear, is the minimum password requirement for admin login, WiFi, or both? Thanks.
 
>- Password Policy Upgrade – Minimum 10 characters with at least 1 letter, 1 digit and 1 special symbol, and no consecutive identical
>characters; hardens defense against brute-force attacks.


Anybody upgraded yet? Just to be clear, is the minimum password requirement for admin login, WiFi, or both? Thanks.
On the other models receiving these upgrades, such as the be96u I have, it was just the admin password.
 
Just to be clear, is the minimum password requirement for admin login, WiFi, or both? Thanks.
The new password requirement is for the administrator login password.
 
If you load a config file that was saved prior to performing the Asus suggested factory-default reset, it is likely the new security adjustments may not be applied due to the CFG will have loaded the old pre reset settings. The question about not wanting to manually reconfigure and use an old CFG file has come up repeatedly with this latest Asus firmware release across a number of recent Release discussions in this subforum. Here is how the Asus-Merlin developer responded to a similar question:

Some are choosing not to factory reset and keep their old settings, others are factory resetting and manually configuring. Choice is yours.
So, quoting exactly:

- I can update firmware
- reboot (utilizing my original config)
- save my config (that's running under the new firmware update)
- factory default reset
- reboot (utilizing new firmware update)
- upload/restore my previously saved config (into new firmware)

and I'm good to go. You said...

Security adjustments. So, it's just settings that ASUS is worried about. Has nothing to do with actual router functionality outside of the settings. I'm confident that my settings are optimal for my environment already, yet even if they weren't I could simply change a few of them around based on ASUS' recommendation.

Let's be exact with understanding. I'm not interested in what users think is correct - I want exact.
 
@Nortonics. Its simple and basic. As indicated by the Asus-Merlin firmware developer. Reloading a configuration file made prior to the factory default reset will completely overwrite the changes done by the factory default reset. In your case; you want to flash the firmware, then immediately save a configuration file, then perform a hard factory reset, then reload the prior configuration file; you run the possible risk of reverting (or undoing) those "new security adjustment" that were applied when you factory default set the router.

Either perform the reset and manually configure or don't and reload the pre factory default reset configuration. Its up to you. In other discussions where this issue on reset has been discussed some others are choosing not performing the factory default reset. They are choosing instead to continue with their own settings as they feel those settings are sufficient in light of the firmware changes this firmware indicates. Asus is "strongly recommending" a reset they are not forcing or requiring it when you update to this new firmware.
 
Let's be exact with understanding. I'm not interested in what users think is correct - I want exact.

Install the firmware, Hard Reset the firmware, and configure the firmware from scratch.

If you have any questions, read FW Reset FAQ again.

OE
 

Support SNBForums w/ Amazon

If you'd like to support SNBForums, just use this link and buy anything on Amazon. Thanks!

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Back
Top