DSL-AC51

Please unzip the firmware file, and then verify the checksum.
SHA256: 74101ee9f9dab07b02d394814b9e5d11102550b6ac76d97546f14ebe17a8628a

- Fixed Security Boa http issue
- Fixed Download Master Cannot Upgrade issue

Security:
- Fix the Security Boa http issue
- Fixed code execution vulnerability
- Fix in french WEB GUI setting Wireless > Professional will show abnormality issue

Please unzip the firmware file, and then verify the checksum.
SHA256: f8fcab4eaf832ed4bf8e4aa08bc3353f5bc7be97cfa212b817fe69bb54a40740

Security:
- [Web] Fixed CVE-2023-30224, CVE-2023-30225 (Authenticated command injection issue)

Bug fixes and enhancements:
- [Enhancement][Web] Apply the new domain name policy

Please unzip the firmware file, and then verify the checksum.
SHA256: 23e95c4d7cc57394a1f5752dbecfb0c07d047822c47e9d2abe63fa792e6071be

Security:
- Update OpenVPN pkitool to generate key/certs with SHA256.
- Update OpenSSL to 1.1.1n and 1.0.2u.
- Update OpenVPN to 2.4.12 for CVE-2022-0547

Bug fixes and enhancements:
- Fixed OpenSSL random number generator error.
- DDNS enable SSL support
- Fix the WiFI cannot be connected once the VLAN ID is set
- Update DHCP renew case to avoid always restart wan related
- Update DHCP lease time and dns in renew case
- Web Support TLS v1.2

Please unzip the firmware file first then check the MD5 code.
MD5: e7de4ea84afb6ed8471699fd4ad11927

Security:
- [Wi-Fi] FragAttacks WiFi Security Vulnerabilities
- [Web] Enhanced protection against XSS attacks.
- [Wi-Fi] Fix the vulnerability of KR00K (CVE-2019-15126).
- [LPRng] Fix the issue that lpd crashed caused by nmap attack.
- [Web] Fix the vulnerability in the network analysis command.

DSL:
- VDSL WAN (PTM) QIS manual setting list updated, added Lebanon ISP Ogero, Australia ISP Superloop and Croatia ISP Hrvatski Telekom (TCom).
- [dsl] Set MCT tlb parameter for dmt.
- [DLA] Drop changing modulation to G.DMT.
- [DSL] Add 'G.INP Stability Adjustment' option for VDSL in DSL Setting > VDSL section.

Bug fixes and enhancements:
- [Wi-Fi] Fix sometimes 2.4G Wireless cannot use iPhone Airplay to Apple TV.
- [Wi-Fi] Fix some customers might not be able to connect to WiFi 5G again after using it for a long time.
- [Wi-Fi] Fix the problem that the DUT crashes when running stress on PON and Wi-Fi for a long time.
- [OPENVPN] Fix openvpn client does not work when there is no "port" in the configuration file.
- [DDNS][Web] Fix unable to login after using DDNS(https 8443 port) for about 3 days.
- [diagnostic] Fix the loss of DSL / WiFi Diagnostic and inaccurate time issue.
- Support option, lcp-echo-adaptive.
- [WLAN][5G] Fix DUT restarts without triggering the force update mechanism.
- [QIS] Set pre-filled ppp login/password for United Kingdom/Scotland/Ireland ISP: BT braodband & BT Business & BT infinity.
- [Web UI] Correct field naming "Class-identifier (option 61)".
- [Web] Correct time zone 'Novosibirsk' in Russia.
- [Web UI] Add a validation to validate target URL.
- [Web] Fix js errors.
- Fix the problem of for IPv6 PPPoE.
- [OPENVPN] update openvpn for CVE.
- [DSL] Enhanced the time for DSL WAN recover from disconnection.
- [Web] Set Stability Adjustment(VDSL) to 15 dB while manual setting area to Turkey.

Please unzip the firmware file first then check the MD5 code.
MD5: 8f91c36eb77af3b1b51ffe16aa7cd38c

Security:
Firmware version earlier than v1.1.2.0, there is authentication bypass vulnerability issue observed. With firmware v1.1.2.0 and later releases such issue already addressed. Thanks for The Doctor (securityforeveryone.com) for raise this issue.

DSL:
- Bitswap setting adjustment for Web UI > QIS > Turkey profiles.
- DSL Driver updated - v5.6.36.0_2020_0327_asus.
- ADSL WAN (ATM) QIS manual setting/Auto detection list updated: Added Italy ISP Vodafone.
- ADSL WAN (ATM)/VDSL WAN (PTM) QIS manual setting list updated: Added United Kingdom ISP Cloudscape Connect.
- VDSL2 G.INP handling fine tuned.

Bug fixes and enhancements:
- Web UI > WebHistory Log/ AccessLog, "Clear" button added.
- Fixed OpenVPN related issues.
- Fine tuned Feedback feature.
- Fixed Web UI related issues.
- Live Update feature enhanced.
- Syslog > WiFi debug log level adjusted.

Security:
- Live Update Security enhancement.

Please unzip the firmware file first then check the MD5 code.
MD5: 72054e0e09e2d662c515a0b1d347a192

Bug fixes and enhancements:
- Now supports Feedback > 12 hours Diagnostic xDSL debug log capture feature for non-USB supported models.
- Feedback > WiFi Diagnostic feature change log file name to “WiFi.log” instead of “TCC.log”. xDSL Diagnostic log remains to be “TCC.log”.
- Fixed VPN settings > username/password, if special character “.” used leads to connectivity issue problem.
- Fine tuned Feedback feature.
- Fixed various Web UI related issues.
- Fine tuned OpenVPN Web UI.

Security:
- Enhanced Security for specific Malware/Malicious Script protection.

Please unzip the firmware file first then check the MD5 code.
MD5: d99341aca5898fc50ce3c91054819399

New:
- Now supports Feedback > DSL Line Diagnostic feature(for no USB port model).

DSL:
- VDSL WAN (PTM) QIS manual setting list updated, added Italy ISP Vodafone.
- ADSL WAN (ATM) QIS manual setting list updated, added Lebanon ISP Ogero.

Bug fixes and enhancements:
- Fixed possible invalid Feedback status leads to no logs download link issue(under Feedback sent failure state).
- Fixed Web UI > invalid Android/iOS App icons issue.
- Fine tune Feedback > Diagnostic “No USB disk plug-in” case.
- After Feedback > DSL Line Diagnostic completed, /jffs/ related logs will be cleared to free up space.
- Fine tune Live Update mechanism.
- Fixed failed to work with the OpenVPN profile of Avira issue.
- Fixed pptp client failed to work with ppp-2.4.7 module issue.
- Fixed wrong OpenVPN server state issue.
- OpenVPN server: update default compression to yes.
- Fixed OpenVPN wrong type conversion/ wrong state after client run successfully issue.
- Fixed the problem that PPPoE Username can't use special character '$'.
- Fixed various Web UI related issues.

Security:
- protect_srv: enhanced with lock time backoff. 1) Record each IP address with fail count. 2) Add lock rule for each IP address. 3) Lock all if too many rules at a same time.

Please unzip the firmware file first then check the MD5 code.
MD5: a7562cf36781d79b0b012e1b2ac71e68

DSL:
- DSL Driver updated - v5.5.2.11_20190418, fixed Austria ISP A1 compatibility issue. Which leads to connection drop.
- When ENCAP Mode is selected as "PPPoE LLC" or "PPPoE VC-Mux", now the 802.1Q selection can be selected and displayed.

Bug fixes and enhancements:
- OpenVPN updated: v2.4.7, now supports TLS 1.1, 1.2, 1.3 and OpenSSL 1.1.
- Feedback > xDSL Diagnostic, log capture time adjustment.
- Support new Feedback mechanism.
- PPPD module updated: ppp-2.4.7, fixed possible PPPoE/PPPoA periodic interruption issue.
- Fixed IPTV issue with specific ISP/IPTV service provider.
- Fixed after failover cannot failback from Secondary-VDSL WAN to Primary-ETHERNET WAN case.
- Fixed Web UI related issues.

Security:
- Fixed command inject in the web-based management interfaceThe security vulnerability.
- Block domain name resolving queries of suspicious servers. Suspicious files removal.

Please unzip the firmware file first then check the MD5 code.
MD5: 4c7984df9a7c1afad05686da274b28e2

DSL:
- DSL Driver updated - v5.5.2.11_20190226, fixed Turkey ISP Turk Telekom DSLAM compatibility issue. Which leads to longer than expected sync time.

Bug fixes and enhancements:
- New input field "ASUS Service No./Case#" added for Feedback form.
- Fixed VoIP service fail issue after Dual WAN fail back occurred.
- 2.4GHz band enhancements adopted.
- Fixed static route rule cannot work if the rule is for second WAN interface issue.
- Removed DSL Modulation > G.DMT mode auto switch function based on data rate observed.
- Fine tune DHCP leases > expire time display format.
- Dual WAN ping target timeout(3 times), changed to 8.8.8.8 instead.
- Fixed Router app failed to prompt for a new version of firmware for update issue.
- Fixed various Web UI related issues.
- Removed unnecessary debug message from Syslog "==>Set_RadioOn_Proc (ON)”.
- Fixed OpenVPN username/ password with special character % failed to work issue.

Security:
- Fixed CVE-2004-0789 (DNS Response Flooding) vulnerability.
- Fixed malformed DNS packet validation.
- Fixed class/type validation , no more IN/A replies to non-IN/A queries.
- Fixed invalid authoritative replies with fake address.
- Added NotImpl reply to non-IN/A queries.


Please unzip the firmware file first then check the MD5 code.
MD5: 4d3dccd57442d3eebbc3402781de1381

DSL:
- Fixed applying wrong DSL setting by wrong attribute for ADSL/VDSL mode.
- ADSL WAN (ATM) QIS manual setting list updated.
Add Turkey ISP TTNET, ADSL+IPTV service.
Add Turkey ISP D-Smart Net(Smile ADSL), ADSL+IPTV service.
Add Turkey ISP Doping, ADSL+IPTV service.
Add Turkey ISP Turkcell Superonline, ADSL+IPTV service.

Bug fixes and enhancements:
- Fixed Dual WAN, Primary/ Secondary WAN switching issue.
- Fixed when applying ISP Specific Setting, it failed to take effect issue.
- 2.4GHz WiFi driver updated/enhanced.
- Fixed ASUS Router app related issue.
- Fixed various UI related issues.
- When Dual WAN is enabld, now at DDNS page could select WAN unit.

Security:
- Fixed WPA2 security vulnerability issue.
- Fixed UI security vulnerability.

Please unzip the firmware file first then check the MD5 code.
MD5: 1d8021bf495e43d727f882f8ac6a2dcc

DSL:
DSL driver updated - v5.5.2.10_20180522, fine tune for Turkey ISPs.
- Added Country/ ISP - Specific Setting on DSL Settings page(Turk Telekom).
- VDSL WAN (PTM) QIS manual setting list updated,
Added Switzerland ISP Swisscom.

Bug fixes and enhancements:
- Fixed romfile corruption leads to possible system abnormal issue.
- Fixed IPTV configuration issue.
- Fine tune OpenVPN server FAQ link.
- Fixed various Web UI related issues.
- Fixed under VDSL mode, possible 2.4GHz band access leads to system stability issue.
- Fixed possible system abnormal issue when conducting stress test on multicast/ LAN <-> Wi-Fi throughput test.
- Throughput enhancement: added more switch buffer in order to cache the burst from WiFi side.

Security:
- Fixed Web UI Command Execution security vulnerability issue, adopted whitelist checking.

Please unzip the firmware file first then check the MD5 code.
MD5: b8ef57079b8a589eae42de4ba5581608

DSL:
- DSL driver updated - v5.5.2.10, fixed possible lower synced upstream data rate issue.
- VDSL WAN (PTM) QIS manual setting list updated,
Added Australia ISP Aussie Broadband.
Added Australia ISP Buzz Telco.
Added Australia ISP MyRepublic.

New feature:
- Now supports TR-069 Client feature(Administration > TR-069).

Bug fixes and enhancements:
- Fixed possible UI failed to login issue.
- Fixed LAN > LAN IP settings failed to take effect issue.
- Fine tune web server.
- Fixed upload Settings file via IE11 would fail issue.
- Fine tune FAQ link.
- Fine tune QoS default rule list.
- Fixed various UI related issues.


Please unzip the firmware file first then check the MD5 code.
MD5: C12973C51D4CA8799A1A7AB25F35F669

DSL:
- DSL driver updated - v5.5.2.9, fixed Greece ISP G.vector compatibility issues.
- Fixed possible ADSL cannot connect with Annex M mode with PPPoE WAN connection type issue, due to invalid initial value leads to abnormal SAR uplink speed.
- Fine tune UI > Network Map for VDSL Regional Mode.
- ADSL WAN (ATM) QIS manual setting list updated,
Add Turkey ISP TurkNet.
- VDSL WAN (PTM) QIS manual setting list updated,
Add Turkey ISP TurkNet.
Add Mexico ISP Telmex.

Bug fixes and enhancements:
- Added WiFi 2.4GHz band enhancements.
- Fixed various WiFi 2.4GHz band issues.
- Fine tune multicast.
- Enhanced PPPoE relay connection performance.
- Adopt UI login enhancement.
- Fixed various UI related issues.
- Fine tune FAQ URL links.
- Added Ethernet WAN Link Up/Down info for Syslog.

Please unzip the firmware file first then check the MD5 code.
MD5: 3624C36043DB57032CB41A04090887E8