AX-88U 3.0.0.4.388_24232 merlin version?

[androsynth96]

I am on AX88U 3004.388.8_4 but I want the security patches in 3.0.0.4.388_24232 but do not want to lose merlin features like skynet also? Will this version get a merlin release?

 

[Mutzli]

The latest security patches are likely incorporated into firmware version 3004.388.8_4. To verify the specifics, you can compare the CVE numbers associated with the security patches included in Asus's _24232 release. Typically, Merlin firmware tends to address security issues more proactively than Asus's official updates. Make sure you look through the complete Changelog-NG.txt file for all the CVE patches included.

 

[Mutzli]

FYI, here is the link to the ASUS Product Security Advisory to compare it with the changelog from Merlin.

​

 

[androsynth96]

There is something listed 01/02/2025 ASUS Router AiCloud vulnerability and this is newer than the most recent Merlin release for this router. CVE-2024-12912 CVE-2024-13062. November release lists CVE-2024-2511, CVE-2024-4741, CVE-2024-5535 .

 

[Analog-1]

There is something listed 01/02/2025 ASUS Router AiCloud vulnerability and this is newer than the most recent Merlin release for this router. CVE-2024-12912 CVE-2024-13062. November release lists CVE-2024-2511, CVE-2024-4741, CVE-2024-5535 .

Yes Merlin has 100% fixed the AiCloud issue in his latest 388 code.

 

[androsynth96]

That is good to know. I did not see that listed somewhere on the recent releases but maybe I did not go back far enough. So I can reset easy on Merlin for the time being then. AX88U non-pro is still supported, right? If not, I would change to a router that is getting security updates. If this router is insecure I would ditch it.

 

[Ripshod]

At the time of that vulnerability almost all the popular asus routers were valid targets. Asus went and provided updates to fix that, including several EOL models out of support.
No need to upgrade just now, your router will be supported by asus and merlin for a good while yet.

 

[Analog-1]

In Merlin commits for 388 code base.

FIXED: Security issues in AiCloud (backports from Asus)

 

[RMerlin]

Nobody worried about security should ever use AiCloud.

 

[androsynth96]

Yes I have aicloud turned off so I suppose this would not affect me anyhow.