ASUS ZenWiFi Pro ET12

- Enhanced system stability.
- Enhanced input validation and refactored legacy string handling routines to ensure robust memory management.
- Implemented comprehensive validation and expanded command filtering in the web history API.
- Strengthened input validation and directory handling in the VPN configuration upload interface.
- Fixed an issue that allowed certain user settings to be bypassed, improving overall user control and protection.

Important: After installing this firmware, we strongly recommend performing a factory-default reset to activate every new security adjustment.

Security Enhancements
- Password Policy Upgrade – Minimum 10 characters with at least 1 letter, 1 digit and 1 special symbol, and no consecutive identical characters; hardens defence against brute-force attacks.
- HTTPS on 8443 – Management interface now served over TLS by default.
- UPnP Disabled – Universal Plug and Play starts in the off state for reduced surface exposure.
- Authentication Logic Refactor – Removed redundant code paths for a lean sign-in flow.
- Memory Safety Guard (CWE-476) – Introduced null-reference protections across critical services.
- Enhanced IPsec Parameter Validation – The existing input checks have been hardened.
- Data Exposure Mitigation (CWE-200) – Reinforced controls on sensitive pathways.
- Detailed Audit Trails – Expanded logging within the authentication module.

System Improvements
- Connection Stability – Core algorithms refined for steadier links.
- Scheduling Accuracy – Timed tasks execute reliably under PPPoE, PPTP and L2TP WAN modes.
- Client List Maintenance – Resolved an issue that prevented offline devices from being removed from the client list.

Improved compatibility with certain IoT devices.

1. Fixed the UI issue in Chrome.
2. Fixed client binding issues in Mesh scenarios.
3. Enhanced input parameter handling techniques to improve data processing stability and system security.
4. Enhance system access control mechanisms.
5. Improved system stability and security by fixing a kernel integrity validation issue.

*Do NOT downgrade the firmware on any mesh device (router or node).
Due to enhanced security mechanisms, both the router and node must be upgraded together. Downgrading may result in a mismatch of security protocols between devices, causing the mesh connection to fail.

1. Strengthened input validation and data processing workflows to further protect information security.
2. Enhanced AiCloud password protection mechanisms, safeguarding against unauthorized access attempts.
3. Enhanced device security through improved buffer handling in connection features.
4. Refined data handling processes, ensuring secure and accurate information management.
5. Enhanced file access control mechanisms, promoting a more secure operating environment.
6. Strengthened certificate protection, providing enhanced data security.

Please unzip the firmware file, and then verify the checksum.
SHA256: aa9a22e00a11ea005e586b9ad569bb832e7153d44e9641c59c2937c00fd0f45e

1. Optimized memory management mechanisms, improving system efficiency and stability.
2. Strengthened input validation and data processing workflows, further protecting your information security.
3. Improved web rendering engine, enhancing browsing experience and security.
4. Enhanced security of system command processing to guard against potential malicious operations.
5. Perfected JavaScript-related security mechanisms, offering a more secure web interaction environment.

Please unzip the firmware file, and then verify the checksum.
SHA256: 5e8a46158f53b14e4ffcc0194651bcf76328e5dfafd8e5c4c179fdb80c673486

Be noted: This is an early stage beta, there might be bugs. This version can be downgraded via web GUI only.

1. Recap new features of 3.0.0.6.102: Guest network Pro(SDN), VLAN, Auto USB WAN backup, iPhone tethering, Multi-services WAN.
2. Re-defined VLAN, supports Trunk, Access mode with VLAN-only-network.
3. Synchronize Guest network pro (SDN) with VLAN, create/delete new VLAN-only-network will create/delete a new profile in Guest network as well.
4. Port isolation and AP isolation to restrict device access to each other.
5. Re-defined multi-service WAN, disable it by default.
6. Add surfshark VPN in VPN fusion.

Please unzip the firmware file first then check the MD5 code.
MD5: fea839edfbcbe1f72e145ab8e02d2ee4