RT-N300

This model was end of its life, and its firmware, utility, website, and manual will no longer be updated. For more details, please refer to https://www.asus.com/event/network/eol-product/

- Fixed KRACK vulnerabilities.
- Fixed information disclosure vulnerability. Thanks to Haitan Xiang and Fand Wang.
- Fixed CVE-2018-5721 Stack-base buffer overflow vulnerability
- Fixed CVE-2018-8826 remote code code execution vulnerability. Thanks to Chris Wood.
- Fixed CVE-2018-5999 HTTP authorization bypass and CVE-2018-6000. An independent security researcher has reported this vulnerability to Beyond Security’s SecuriTeam Secure Disclosure program
- Fixed remote code execution vulnerability. Thanks to David Maciejak of Fortinet's FortiGuard Labs
- Fixed CVE-2017-14491: DNS - 2 byte heap based overflow
- Fixed CVE-2017-14492: DHCP - heap based overflow
- Fixed CVE-2017-14493: DHCP - stack based overflow
- Fixed CVE-2017-14494: DHCP - info leak
- Fixed CVE-2017-14495: DNS - OOM DoS
- Fixed CVE-2017-14496: DNS - DoS Integer underflow
- Fixed CVE-2017-13704: Bug collision


Please unzip the firmware file first then check the MD5 code.
MD5: 57bf506982660978b58461aefbddbacf

Security fixed
- Fixed CVE-2017-5892 (JSONP Information Disclosure)
- Improved brute-force protection for SSH, Telnet connection.

Bug fixed
- Fixed URL filter, keyword filter, network filter time related issue.


Please unzip the firmware file first then check the MD5 code.
MD5: f7272dbdbd87dd4018c7c9f88232d9a1

Security fixed
- Fixed CVE-2017-5891.
- Fixed CVE-2017-5892.
- Fixed CVE-2017-6547.
- Fixed CVE-2017-6549.
- Fixed CVE-2017-6548.
- Added log message for brute force attack.

Bug fixed
- Fixed UI issue when using Chrome 56.


Please unzip the firmware file first then check the MD5 code.
MD5: 5d9f2f633f49dbf3ae6c199a4dcab656

- Bug fixed

MD5:53dd98e0ff06818680a9940dc13beb32

[Beta release]
[Important] This version include lots of security fixed and change the authentication method.
After firmware updated, please press the reset button more than five seconds to reset the router to avoid some compatibility issues.

Security fixes:
- Fixed User-Agent buffer overflow.
- Fixed null ptr dereference in https issue.
- Fixed buffer overflow issues.
- Modified brute-force protection mechanism in router login page.
- Fixed CVE-2015-6949 buffer overflow issue.
- Fixed Web server Accept-Language buffer overflow.
- Fixed Web server URL handler buffer overflow.
- Fixed CSRF and XSS vulnerability.
- Enhanced router login password and wireless password(WPA2) strength check method to against brute-force attack.
- Reject administrator to set too easy to guess login and wireless password to avoid brute-force attack.
- Fixed CSRF and XSS vulnerability when router is in default status (user does not set the router yet)
- Restricted access from wan method to enhance security.
- Changed Telnet default access interface.

New Features
- Support ASUS Router App
- Added Bandwidth Limiter in QoS. Let administrator easily limit specific client's upload/ download bandwidth
- Independent mac filter for main wireless network and guest network. Administrator can set white list for main wireless network to only allow trust client connect to main wireless network and share network to guest with guest network
- Modified the network map client status. When chick the client icon, administrator can bind IP, change host name, change icon, block internet access or set time scheduling.
- Added client list view button on network map and help administrator easily monitor all client connection status.
- Add reboot schedule in Administration --> System

Modifications
- Adjusted Guest network mac filter maximum client number to 16
- Allow paste password on login page to fulfill some password management softwares requirement.
- Show current control channel while value is auto.
- Bandwidth limiter can accept decimal point.
- Unnecessary to reboot router after set allow only specified IP address to enter GUI.
- Changed warning page style.

Bug fixes
- Fixed setup wizard IE11 compatibility issue.
- Fixed MAC clone abnormal issue
- Fixed web redirection issue when WAN IP conflicted.
- Fixed compatibility issues for IE8
- Fixed GUI related issues
- Fixed login issue when router’s IP is 10.x.x.x
- Fixed parental control-> time scheduling related issue.
- Fixed IPv6 relay issues.
- Fixed the GUI issue for reboot scheduler

The first version of firmware for RT-N300