RT-N66U

Please unzip the firmware file, and then verify the checksum.
SHA256: 81a9fdb9ebe4d2cac31317630a9614fad6b4b7336c1ee24e0371ea182327ca90

1. Strengthened input validation and data processing workflows to further protect information security.
2. Enhanced AiCloud password protection mechanisms, safeguarding against unauthorized access attempts.
3. Enhanced device security through improved buffer handling in connection features.
4. Refined data handling processes, ensuring secure and accurate information management.
5. Enhanced file access control mechanisms, promoting a more secure operating environment.
6. Strengthened certificate protection, providing enhanced data security.

1.Strengthened system code execution processes.
2.Enhanced AiCloud password protection mechanisms, safeguarding against unauthorized access attempts.
3.Refined input validation in the web interface, ensuring a more secure web interaction environment.
4.Improved data export functionality in the admin portal, ensuring accurate and secure handling of client information.
5.Optimized memory management mechanisms, improving system stability.
6.Improved system buffer management, ensuring reliable data processing workflows.
7.Enhanced stack buffer management, promoting greater system stability.

Please unzip the firmware file, and then verify the checksum.
SHA256: 2b3f87b5879997345b0f7ec279c6d1b9dce2a2fd746807c6c7a323723f063238

Security update
- Fixed WPS issue to improve network security.
- Resolved a security vulnerability in AiCloud.
- Fixed CVE-2020-12695.
- Fixed CVE-2017-15653.
- Fixed Reflected XSS vulnerability.
- Addressed a directory traversal vulnerability for improved system security.

Please unzip the firmware file, and then verify the checksum.
SHA256: a73bf42d35a561953c730dac38dc0fb869d4e56428af748703218c18b7ed73c1

- Fixed CVE-2018-20334
- Fixed CVE-2018-20336
- Fixed null pointer issue.
- Fixed DDoS vulnerability.
- Fixed command injection vulnerability.
- Fixed buffer overflow vulnerability.
- Updated OTA function.

Please unzip the firmware file first then check the MD5 code.
MD5: 1c42577ee323c273eec006b99ad635c6

- Fix a DDoS vulnerability.

Please unzip the firmware file first then check the MD5 code.
MD5: a92ef54c320871859fe40c2678fd35de

- Fixed firmware update notification bugs.
- Fixed dual wan user interface bugs.

Please unzip the firmware file first then check the MD5 code.
MD5: af3f30bd70e4bc394782211209515a10

Security Fix
- Fixed DDoS vulnerability.
- Fixed AiCloud vulnerability. Thanks for Matt Cundari's contribution.
- Fixed command injection vulnerability. Thanks for S1mba Lu's contribution.
- Fixed buffer overflow vulnerability. Thanks for Javier Aguinaga's contribution.
- Fixed CVE-2018-20334
- Fixed CVE-2018-20336
- Fixed null pointer issue. Thanks for CodeBreaker of STARLabs’ contribution.
- Fixed AiCloud buffer overflow vulnerability. Thanks for Resecurity International's contribution.

Please unzip the firmware file first then check the MD5 code.
MD5: f4bda506824b9b82ee2594c1ec397f8a

- Fixed bugs.
- Improved system stability.


Please unzip the firmware file first then check the MD5 code.
MD5: 5b0ab9d736dc73001c315a6d83329966

- Support multi-language (UTF-8) network name
(Windows XP and Windows 7 do not support UTF-8 format SSID. These two OS may see gibberish if using multi-language SSID.)
- Improved system stability.
- Fixed XSS vulnerability. Thanks to Yonghui Han of Fortinet's FortiGuard Labs.
- Fixed CVE-2018-8877, CVE-2018-8878, CVE-2018-8879
- Fixed plain text password vulnerability in lighttpd.
- Fixed AiCloud cannot login issue.
- Modified Quick Internet Setup wizard process.
- Main SSID and guest network can hide independently.

Please unzip the firmware file first then check the MD5 code.
MD5: 906ff822635bb62e724b64a5e84c3ec3