RT-N11P

Security fixed
- Fixed CVE-2017-5891.
- Fixed CVE-2017-5892.
- Fixed CVE-2017-6547.
- Fixed CVE-2017-6549.
- Fixed CVE-2017-6548.
- Added log message for brute force attack.

Bug fixed
- Fixed UI issue when using Chrome 56.

Please unzip the firmware file first then check the MD5 code.
MD5: 99b5a2275252768a804bb2a706f47cbe

ASUS has been dedicated to cooperate with third party developers to come up with more innovative features.
To comply with regulatory amendments, we have modified firmware verification rule to ensure better firmware quality.
This version is not compatible with all previously released ASUS firmware and uncertified third party firmware.

- Fixed XSS issue in WDS page. Special thanks for Jamie's contribution.
- Fixed LPR buffer overflow issue. Special thanks for GeekPwn contribution.
- Remoted DHCP information disclosure.
- Fixed Samba Badlock CVE-2016-2110 (Man in the middle attacks possible with NTLMSSP)
- Fixed Samba Badlock CVE-2016-2111 (NETLOGON Spoofing Vulnerability)
- ASUS firmware did not enable Samba LDAP, and not affected by CVE-2016-2112 (LDAP client and server don't enforce integrity) issue.
- The Samba version in ASUS firmware was not affected by
CVE-2016-2118 (SAMR and LSA man in the middle attacks possible)
- The Samba version in ASUS firmware was not affected by
CVE-2015-5370 (Multiple errors in DCE-RPC code)
- Fixed command injection issue. Thanks for Chris' contribution.
- Fixed XSS issue. Thanks for Chris' contribution.

MD5 : ec70362c3c94451c4bc6c4b5450da10f

Fixed internet wizard UI issue when manual setup PPPoE and not connect WAN cable

Release Note
- Upgrade Wi-Fi driver to v2720
- Fix LED behavior
- Fix compatible issues with IE8
- Fix Turkish QIS flow

[Beta release]
[Important] This version include lots of security fixed and change the authentication method.
After firmware updated, please press the reset button more than five seconds to reset the router to avoid some compatibility issues.

Security fixes:
- Fixed User-Agent buffer overflow.
- Fixed null ptr dereference in https issue.
- Fixed buffer overflow issues.
- Modified brute-force protection mechanism in router login page.
- Fixed CVE-2015-6949 buffer overflow issue.
- Fixed Web server Accept-Language buffer overflow.
- Fixed Web server URL handler buffer overflow.
- Fixed CSRF and XSS vulnerability.
- Enhanced router login password and wireless password(WPA2) strength check method to against brute-force attack.
- Reject administrator to set too easy to guess login and wireless password to avoid brute-force attack.
- Fixed CSRF and XSS vulnerability when router is in default status (user does not set the router yet)
- Restricted access from wan method to enhance security.
- Changed Telnet default access interface.

New Features
- Support ASUS Router App
- Added Bandwidth Limiter in QoS. Let administrator easily limit specific client's upload/ download bandwidth
- Independent mac filter for main wireless network and guest network. Administrator can set white list for main wireless network to only allow trust client connect to main wireless network and share network to guest with guest network
- Modified the network map client status. When chick the client icon, administrator can bind IP, change host name, change icon, block internet access or set time scheduling.
- Added client list view button on network map and help administrator easily monitor all client connection status.
- Add reboot schedule in Administration --> System

Modifications
- Adjusted Guest network mac filter maximum client number to 16
- Allow paste password on login page to fulfill some password management softwares requirement.
- Show current control channel while value is auto.
- Bandwidth limiter can accept decimal point.
- Unnecessary to reboot router after set allow only specified IP address to enter GUI.
- Changed warning page style.

Bug fixes
- Fixed setup wizard IE11 compatibility issue.
- Fixed MAC clone abnormal issue
- Fixed web redirection issue when WAN IP conflicted.
- Fixed compatibility issues for IE8
- Fixed GUI related issues
- Fixed login issue when router’s IP is 10.x.x.x
- Fixed parental control-> time scheduling related issue.
- Fixed IPv6 relay issues.
- Fixed the GUI issue for reboot scheduler

- Release Note -
-Fixed infosvr security issue.
-Fixed Cross-site request forgery security issue

-Fixed infosvr security issue.
-Fixed Cross-site request forgery security issue

Network map new features:
- Click the lock icon in client profile to assign fixed IP for client.
- Added number on client icon to show how many clients connect to repeater and AP under router
- Added the DHCP and static IP identification.

Others
- Fixed NAT loopback issue.
- Fixed various GUI issues.