Multiple vulnerabilities in Asus routers

[seekingbuddha]

I am not an expert in security, but while doing a search on google regarding Asus Merlin and trying to figure out if alternate firmware for my new Asus TM-AC1900 ( ie. RT-AC68U) i ran into this webpage that discusses security issues with Asus routers. I have not read the whole thread, but comments are only about 3 months old, as of August 2017.

I wish to discuss if Asus Merlin and/OR Tomato have fixed the issues discussed in the above article/comments. I plan to run both of these firmwares, to see what fits my needs best. Thanks for all comments regarding which one of these two firmware is better suited for someone who DOES NOT plan to run a Gigabit wireless LAN, but needs only

1. Performance
2. Stability
3. Ability to increase/decrease transmit power of router AC68U
4. Security updates to the firmware done at least once in 6 months (or a year) . I can not upgrade firmware on my home router every month or two, but will update to new version of firmware, only when time permits ( -- like most home users, who choose 3rd party firmware for their routers).

 

[ColinTaylor]

I wish to discuss if Asus Merlin and/OR Tomato have fixed the issues discussed in the above article/comments.

Asus fixed those issues in firmware version 3.0.0.4.380.7743.

If you want to know if something has been fixed look in the changlog for the firmware.

https://www.asus.com/uk/Networking/RTAC68U/HelpDesk_Download/

 

[joegreat]

...but needs only

1. Performance
2. Stability
3. Ability to increase/decrease transmit power of router AC68U
4. Security updates to the firmware done at least once in 6 months (or a year) . I can not upgrade firmware on my home router every month or two, but will update to new version of firmware, only when time permits ( -- like most home users, who choose 3rd party firmware for their routers).

The ability of increase/decrease transmit power is out of control for the end user due to regulatory requirements: Asus had to lock down this options (and to my opinion: they have overdone it).

The rest of your requirements is part of the Merlin Charta for his firmware fork.