That site… even the model list is an advertorial.
- XT8 (ZenWiFi AX XT8)
- XT8_V2 (ZenWiFi AX XT8 V2)
- RT-AX88U
- RT-AX58U
- RT-AX57
- RT-AC86U
- RT-AC68U
Absolutely. Like why in the world would the article have a list of features included in each model of router?
Curious to know if this affects the DD-WRT style firmware as well?
Anyone got a link to the vulnerability information? I’d like to try it out on my router just for fun.
Edit: found the CVE
It’s really too bad I’m unable to update my firmware until I agree to let ASUS sell my data.
Friendly reminder that OpenWrt exists, and is probably safer than the stock firmware in any consumer router.
From a quick look, I see that at least one of the affected models has official OpenWrt support: the RT-AC68U
Friendly reminder that OpenWrt supports Raspberry Pi and every Pi from 3 onwards makes for a great, inexpensive router. Adding WiFi can be done with any off-the-shelf WiFi router or access point, brand new or second hand. Since they aren’t exposed to the Internet, remote vulnerabilities are significantly mitigated.
If you are willing to spend a bit more upfront, I bought a mini PC in 2017 and installed opnsense on it. It’s still rock solid. For wifi, I use a separate ap (a ubiquity UAP that I bought in 2015) and it is also going strong. Almost a decade of rock solid performance easily beats out any other router I’ve owned in terms of both performance and cost.
Another friendly reminder, enterprise-grade routers like Mikrotik are fantastic. They don’t have wifi builtin, so you may never need to upgrade it if you get fast enough uplink (mine is gigabit, so should be fine). You’ll need a separate AP (I got Ubiquiti). They’re way more feature complete than nonsense like these from ASUS, and they generally have more secure firmware.