Security:
- Fix the Security Boa http issue
- Fixed code execution vulnerability
- Fix in french WEB GUI setting Wireless > Professional will show abnormality issue

Please unzip the firmware file, and then verify the checksum.
SHA256: f7fc294c492f5d8756137d1722594a929dc6dc2e02255a175b9218d2be3d38fa

Security:
- [Web] Fixed CVE-2023-30224, CVE-2023-30225 (Authenticated command injection issue)

Bug fixes and enhancements:
- [Enhancement][Web] Apply the new domain name policy

Please unzip the firmware file, and then verify the checksum.
SHA256: f79452190301caf62bc73f17d3b48fab5e658f0668dd8e5fb3c7c6f07428d908

Security:
- Update OpenVPN pkitool to generate key/certs with SHA256.
- Update OpenSSL to 1.1.1n and 1.0.2u.
- Update OpenVPN to 2.4.12 for CVE-2022-0547

Bug fixes and enhancements:
- Fixed OpenSSL random number generator error.
- DDNS enable SSL support
- Fix the WiFI cannot be connected once the VLAN ID is set
- Update DHCP renew case to avoid always restart wan related
- Update DHCP lease time and dns in renew case
- Web Support TLS v1.2

Please unzip the firmware file first then check the MD5 code.
MD5: d1a614a8b52abefb90a16073c8b058c8

Security:
- [Wi-Fi] FragAttacks WiFi Security Vulnerabilities
- [Web] Enhanced protection against XSS attacks.
- [Wi-Fi] Fix the vulnerability of KR00K (CVE-2019-15126).
- [LPRng] Fix the issue that lpd crashed caused by nmap attack.
- [Web] Fix the vulnerability in the network analysis command.

DSL:
- VDSL WAN (PTM) QIS manual setting list updated, added Lebanon ISP Ogero, Australia ISP Superloop and Croatia ISP Hrvatski Telekom (TCom).
- [dsl] Set MCT tlb parameter for dmt.
- [DLA] Drop changing modulation to G.DMT.
- [DSL] Add 'G.INP Stability Adjustment' option for VDSL in DSL Setting > VDSL section.

Bug fixes and enhancements:
- [Wi-Fi] Fix sometimes 2.4G Wireless cannot use iPhone Airplay to Apple TV.
- [Wi-Fi] Fix some customers might not be able to connect to WiFi 5G again after using it for a long time.
- [Wi-Fi] Fix the problem that the DUT crashes when running stress on PON and Wi-Fi for a long time.
- [OPENVPN] Fix openvpn client does not work when there is no "port" in the configuration file.
- [DDNS][Web] Fix unable to login after using DDNS(https 8443 port) for about 3 days.
- [diagnostic] Fix the loss of DSL / WiFi Diagnostic and inaccurate time issue.
- Support option, lcp-echo-adaptive.
- [WLAN][5G] Fix DUT restarts without triggering the force update mechanism.
- [QIS] Set pre-filled ppp login/password for United Kingdom/Scotland/Ireland ISP: BT braodband & BT Business & BT infinity.
- [Web UI] Correct field naming "Class-identifier (option 61)".
- [Web] Correct time zone 'Novosibirsk' in Russia.
- [Web UI] Add a validation to validate target URL.
- [Web] Fix js errors.
- Fix the problem of for IPv6 PPPoE.
- [OPENVPN] update openvpn for CVE.
- [DSL] Enhanced the time for DSL WAN recover from disconnection.
- [Web] Set Stability Adjustment(VDSL) to 15 dB while manual setting area to Turkey.

Please unzip the firmware file first then check the MD5 code.
MD5: e3aa0e1c1f272483b235a959029fe58a

Security:
Firmware version earlier than v1.1.2.0, there is authentication bypass vulnerability issue observed. With firmware v1.1.2.0 and later releases such issue already addressed. Thanks for The Doctor (securityforeveryone.com) for raise this issue.

DSL:
- Bitswap setting adjustment for Web UI > QIS > Turkey profiles.
- DSL Driver updated - v5.6.36.0_2020_0327_asus.
- ADSL WAN (ATM) QIS manual setting/Auto detection list updated: Added Italy ISP Vodafone.
- ADSL WAN (ATM)/VDSL WAN (PTM) QIS manual setting list updated: Added United Kingdom ISP Cloudscape Connect.
- VDSL2 G.INP handling fine tuned.

Bug fixes and enhancements:
- Web UI > WebHistory Log/ AccessLog, "Clear" button added.
- Fixed OpenVPN related issues.
- Fine tuned Feedback feature.
- Fixed Web UI related issues.
- Live Update feature enhanced.
- Syslog > WiFi debug log level adjusted.

Security:
- Live Update Security enhancement.

Please unzip the firmware file first then check the MD5 code.
MD5: 60f9717a93367df84f8dcf24aedc3797

Bug fixes and enhancements:
- Now supports Feedback > 12 hours Diagnostic xDSL debug log capture feature for non-USB supported models.
- Feedback > WiFi Diagnostic feature change log file name to “WiFi.log” instead of “TCC.log”. xDSL Diagnostic log remains to be “TCC.log”.
- Fixed VPN settings > username/password, if special character “.” used leads to connectivity issue problem.
- Fine tuned Feedback feature.
- Fixed various Web UI related issues.
- Fine tuned OpenVPN Web UI.

Security:
- Enhanced Security for specific Malware/Malicious Script protection.

Please unzip the firmware file first then check the MD5 code.
MD5: a6033eaa948a0a1de8f36665cfc6d134

DSL:
- VDSL WAN (PTM) QIS manual setting list updated, added Italy ISP Vodafone.
- ADSL WAN (ATM) QIS manual setting list updated, added Lebanon ISP Ogero.

Bug fixes and enhancements:
- Fixed possible invalid Feedback status leads to no logs download link issue(under Feedback sent failure state).
- Fixed Web UI > invalid Android/iOS App icons issue.
- Fine tune Feedback > Diagnostic “No USB disk plug-in” case.
- After Feedback > DSL Line Diagnostic completed, /jffs/ related logs will be cleared to free up space.
- Fine tune Live Update mechanism.
- Fixed failed to work with the OpenVPN profile of Avira issue.
- Fixed pptp client failed to work with ppp-2.4.7 module issue.
- Fixed wrong OpenVPN server state issue.
- OpenVPN server: update default compression to yes.
- Fixed OpenVPN wrong type conversion/ wrong state after client run successfully issue.
- Fixed the problem that PPPoE Username can't use special character '$'.
- Fixed various Web UI related issues.

Security:
- protect_srv: enhanced with lock time backoff. 1) Record each IP address with fail count. 2) Add lock rule for each IP address. 3) Lock all if too many rules at a same time.

Please unzip the firmware file first then check the MD5 code.
MD5: 3da17e741b5ecb36a4ac5a046ba84b1c

DSL:
- DSL Driver updated - v5.5.2.11_20190418, fixed Austria ISP A1 compatibility issue. Which leads to connection drop.
- When ENCAP Mode is selected as "PPPoE LLC" or "PPPoE VC-Mux", now the 802.1Q selection can be selected and displayed.

Bug fixes and enhancements:
- OpenVPN updated: v2.4.7, now supports TLS 1.1, 1.2, 1.3 and OpenSSL 1.1.
- Feedback > xDSL Diagnostic, log capture time adjustment.
- Support new Feedback mechanism.
- PPPD module updated: ppp-2.4.7, fixed possible PPPoE/PPPoA periodic interruption issue.
- Fixed IPTV issue with specific ISP/IPTV service provider.
- Fixed 5GHz band throughput drop issue.
- Fixed after failover cannot failback from Secondary-VDSL WAN to Primary-ETHERNET WAN case.
- Fixed Web UI related issues.

Security:
- Fixed command inject in the web-based management interfaceThe security vulnerability.
- Block domain name resolving queries of suspicious servers. Disable execution permission of /jffs, suspicious files removal

Please unzip the firmware file first then check the MD5 code.
MD5: e4388c67dba8b3f3ecd299f2182c11b8

DSL:
- DSL Driver updated - v5.5.2.11_20190226, fixed Turkey ISP Turk Telekom DSLAM compatibility issue. Which leads to longer than expected sync time.

Bug fixes and enhancements:
- New input field "ASUS Service No./Case#" added for Feedback form.
- Fixed VoIP service fail issue after Dual WAN fail back occurred.
- 2.4GHz band enhancements adopted.
- Fixed static route rule cannot work if the rule is for second WAN interface issue.
- Removed DSL Modulation > G.DMT mode auto switch function based on data rate observed.
- Fine tune DHCP leases > expire time display format.
- Dual WAN ping target timeout(3 times), changed to 8.8.8.8 instead.
- Fixed Router app failed to prompt for a new version of firmware for update issue.
- Fixed various Web UI related issues.
- Fixed 5GHz band invalid RSSI value which leads to possible WiFi coverage issue.
- Removed unnecessary debug message from Syslog "==>Set_RadioOn_Proc (ON)”.
- Fixed OpenVPN username/ password with special character % failed to work issue.

Security:
- Fixed CVE-2004-0789 (DNS Response Flooding) vulnerability.
- Fixed malformed DNS packet validation.
- Fixed class/type validation , no more IN/A replies to non-IN/A queries.
- Fixed invalid authoritative replies with fake address.
- Added NotImpl reply to non-IN/A queries.


Please unzip the firmware file first then check the MD5 code.
MD5: e65e353455d03ae224979cfa7eda20e2

New feature:
- Now supports Feedback > WiFi Diagnostic log capture feature.

DSL:
- Fixed applying wrong DSL setting by wrong attribute for ADSL/VDSL mode.
- ADSL WAN (ATM) QIS manual setting list updated.
Add Turkey ISP TTNET, ADSL+IPTV service.
Add Turkey ISP D-Smart Net(Smile ADSL), ADSL+IPTV service.
Add Turkey ISP Doping, ADSL+IPTV service.
Add Turkey ISP Turkcell Superonline, ADSL+IPTV service.

Bug fixes and enhancements:
- Fixed Dual WAN, Primary/ Secondary WAN switching issue.
- Fixed when applying ISP Specific Setting, it failed to take effect issue.
- AiCloud updated: v2.0.2.8.
- Fixed possible 5GHz connection rate drop from 780Mbps to between 54Mbps - 173Mbps issue.
- 2.4GHz WiFi driver updated/enhanced.
- 5GHz WiFi driver enhanced.
- Fixed ASUS Router app related issue.
- Fixed various UI related issues.
- When Dual WAN is enabld, now at DDNS page could select WAN unit.

Security:
- Fixed WPA2 security vulnerability issue.
- Fixed UI security vulnerability.

Please unzip the firmware file first then check the MD5 code.
MD5: 516b373b6ae998dd9319c5d41f331886

DSL:
- DSL driver updated - v5.5.2.10_20180522, fine tune for Turkey ISPs.
- Added Country/ ISP - Specific Setting on DSL Settings page(Turk Telekom).
- VDSL WAN (PTM) QIS manual setting list updated,
Added Switzerland ISP Swisscom.

Bug fixes and enhancements:
- 5GHz band WiFi driver enhancements adopted, improve the retry mechanism when the key is exchanged.
- Fixed 5GHz band possible connectivity/scan issue.
- 5GHz band WiFi driver updated: v3.0.4.0.P2_DPA.
- Fixed romfile corruption leads to possible system abnormal issue.
- Fixed IPTV configuration issue.
- Fine tune OpenVPN server FAQ link.
- Fixed various Web UI related issues.
- DPI Engine updated: RC25.
- Fixed under VDSL mode, possible 2.4GHz band access leads to system stability issue.
- Fixed possible system abnormal issue when conducting stress test on multicast/ LAN <-> Wi-Fi throughput test.

Security:
- Fixed Web UI Command Execution security vulnerability issue, adopted whitelist checking.

Please unzip the firmware file first then check the MD5 code.
MD5: 1e266554e440916a4bd4248593ff0c03

DSL:
- DSL driver updated - v5.5.2.10, fixed possible lower synced upstream data rate issue.
- VDSL WAN (PTM) QIS manual setting list updated,
Added Australia ISP Aussie Broadband.
Added Australia ISP Buzz Telco.
Added Australia ISP MyRepublic.

Bug fixes and enhancements:
- Fixed possible UI failed to login issue.
- Fixed LAN > LAN IP settings failed to take effect issue.
- Fine tune web server.
- Fixed upload Settings file via IE11 would fail issue.
- Fine tune FAQ link.
- Fine tune QoS default rule list.
- Fixed various UI related issues.


Please unzip the firmware file first then check the MD5 code.
MD5: 36676e32f15b6df78cafb3c6d788b695

DSL:
- DSL driver updated - v5.5.2.9, fixed Greece ISP G.vector compatibility issues.
- Fixed possible ADSL cannot connect with Annex M mode with PPPoE WAN connection type issue, due to invalid initial value leads to abnormal SAR uplink speed.
- Fine tune UI > Network Map for VDSL Regional Mode.
- ADSL WAN (ATM) QIS manual setting list updated,
Add Turkey ISP TurkNet.
- VDSL WAN (PTM) QIS manual setting list updated,
Add Turkey ISP TurkNet.
Add Mexico ISP Telmex.

Bug fixes and enhancements:
- Added WiFi 2.4GHz band enhancements.
- Fixed various WiFi 2.4GHz band issues.
- Fine tune multicast.
- Enhanced PPPoE relay connection performance.
- Adopt UI login enhancement.
- Fixed various UI related issues.
- Fine tune FAQ URL links.
- TM DPI engine updated - ASUS_2.001_RC23_00023.
- Added Ethernet WAN Link Up/Down info for Syslog.


Please unzip the firmware file first then check the MD5 code.
MD5: 9d1f14bb2dd9391b2787f5cde6b28673