New features for ASUSWRT 5.0

-Kid's Network: Easily create a separate SSID for children's devices. Integrated AdGuard DNS offers advanced protection options, including service and website blocking, query logs, tracker blocking, and ad pop-up Ad blocking. For more details, please visit our FAQ page.https://www.asus.com/support/FAQ/1051213/

-VPN Network: Establish a VPN-specific SSID to centralize VPN settings for all connected devices. This feature allows for the importation of profiles from popular VPN services such as Surfshark, NordVPN, and CyberGhost from VPN Fusion

Please refer

Surfshark:https://www.asus.com/support/FAQ/1049833/

NordVPN: https://www.asus.com/support/FAQ/1051215/

CyberShost: https://www.asus.com/support/FAQ/1051645/

-IoT Network : Set up and manage all your IoT devices under one secure SSID.

-Guest Portal: Create a guest network with a WiFi schedule and access rights to control when and how guests can use the network.

-VLAN, allow you to segment a network into smaller, virtual sub-networks, which can be used to isolate traffic, please refer to https://www.asus.com/support/FAQ/1049415/

-Multi-services WAN, create multiple profiles on a single WAN interface. (https://asus.com/support/FAQ/1050072)

-Port isolation and AP isolation to restrict device access to each other.



Bug Fixes and Enhancements：

- Fixed an issue where the RE product ID was not being updated in the AiMesh topology.

- Corrected a display issue in the OpenVPN server that prevented IPv6 settings from showing correctly.

- Fixed a persistent GUI issue on 'Let's Encrypt Authorization' that displayed 'Authorization' incorrectly.

- Added DS-Lite Support.



Security updates:

- Addressed CVE-2023-48795 by updating the dropbear SSH server.

- Applied patches for CVE-2023-5678 & CVE-2024-0727

- Improved security in OpenVPN custom configuration.



Please unzip the firmware file, and then verify the checksum.

SHA256: 19854a3c6b263e197fb423655685a4a8c1a3ac7e1c77f012cadeb23cb91c4d8a

Bug Fixes and Enhancements：
- Enabled DynDNS and No-IP DDNS to use IPv6.
- Enabled WireGuard Server clients to access the Samba server.
- Enabled the failback function when using the iOS/Android USB backup WAN.
- Improved AiMesh backhaul stability.
- Improved Wireguard performance.
- Improved consistent display of client status on the WireGuard server.
- Improved stability when enabling or disabling the WireGuard server.
- Improved system stability when accessing the WireGuard Server with DMZ enabled.
- Improved memory utilization and fixed an occasional server error when registering DDNS with an app.
- Modified the USB application option text in dual WAN.
- Fixed network map bugs.
- Fixed memory leak issue.
- Fixed v6plus related Issues.
- Fixed ipv6 network service filter not work.
- Fixed the IPsec VPN compatibility issue with Win10.
- Fixed the reboot issue when assigning specific clients in VPN fusion.
- Fixed Client DOM Stored XSS vulnerability.
- Fixed the AiCloud login issue after unplugging and plugging the HDD into the USB port.
- Fixed the problem that the AiCloud app cannot add router on Android 9.
- Fixed the issue where Traffic Analyzer sometimes couldn't record data.
- Fixed the time display issue for the preferred upgrade time in the Auto Firmware Upgrade function.
- Fixed AiMesh preferred AP identification in site survey results.
- Fixed a bug encountered when adding a rule to the network services filter.
- Fine-tuned the description for port status.
- Resolved the issue with login and password changes.
- Resolved the IPSec VPN connection issues.
- Resolved OpenVPN Server TAP Mode Issue.
- Resolved the Instant Guard connection issues.
- Resolved an issue that caused hostname errors in the DDNS service.
- Resolved the ARP response issue, along with the connection issue between the router and the ROG Phone 6 and 7.
- Resolved the issue where the USB path is not displayed on the Media Server page in the AiMesh node.


Security updates:
- Enabled and supported ECDSA certificates for Let's Encrypt.
- Enhanced protection for credentials.
- Enhanced protection for OTA firmware updates.
- Enhanced protection against SSH brute force attacks.
- Fixed CVE-2022-46871.
- Fixed Client DOM Stored XSS.
- Fixed DoS vulnerabilities in httpd and firewall configuration pages.
- Fixed information disclosure vulnerability.
- Fixed null pointer dereference vulnerabilities.
- Fixed the cfg server vulnerability.
- Fixed FFmpeg vulnerabilities.
- Fixed OpenSSL vulnerabilities.
- Fixed several curl vulnerabilities.
- Fixed CVE-2023-28702 and CVE-2023-28703.
- Fixed an OpenVPN vulnerability categorized as CWE-134.
- Fixed the vulnerability in the logmessage function CVE-2023-35086/ CVE-2023-35087.
- Fixed security issues on the status page.

Please unzip the firmware file, and then verify the checksum.
SHA256: b27bb806d3b2d527c281fd12031b3692c3ebdb0772911e30ed7ba39bd95c199f

Bug Fixes and Enhancements：
Resolved guest network connectivity issues on AiMesh nodes by disabling guest network internal access.

Please unzip the firmware file, and then verify the checksum.
SHA25: 639fbf6ca15d8848db2223244afbdb3ed1e4523486f60367645acf77ef9549b4

Bug Fixes and Enhancements：
- Fixed WAN connection issues.
- Fixed v6plus related issues.
- Added OCN support.
- Resolved an issue that caused hostname errors in the DDNS service.
- Resolved OpenVPN server TAP Mode Issue.
- Fixed the problem that the AiCloud app cannot add router on Android 9.
- Ensured consistent display of client status on the WireGuard server.
- Enhanced system stability when accessing the WireGuard server with DMZ enabled.
- Improved stability when enabling or disabling the WireGuard server.
- Optimized memory utilization and fixed an occasional server error when registering DDNS with an app.
- Corrected a bug encountered when adding a rule to the network services filter.

Security Fixes：
- Fixed several curl vulnerabilities.
- Fixed OpenSSL vulnerabilities.
- Upgraded to the latest dropbear version.
- Fixed a stack overflow vulnerability.

Please unzip the firmware file, and then verify the checksum.
SHA256: f250bc4fdedc6556937e098f29195f7c6e9c869a462ca991b331dc3985d53574

Bug Fixes and Enhancements
-NowTV profile has been added under new IPTV profiles.
-IPTV settings have been updated for better compatibility with Unifi Biz VoIP service.
-Fixed a GUI bug that occurred when adding port range rules in the Network Service Filter.
-Resolved an issue that caused hostname errors in the DDNS service.

Security Fixes
-Fixed several curl vulnerabilities including CVE-2023-28322, CVE-2023-28321, and CVE-2023-28319.
-Fixed FFmpeg vulnerabilities, specifically CVE-2022-3964, CVE-2022-48434, and CVE-2022-3109.
-Corrected an OpenVPN vulnerability categorized as CWE-134.
-Fixed the Hostap vulnerability CVE-2019-10064.
-Patched a command injection vulnerability.
-Strengthened protection against SSH brute force attacks.

Please unzip the firmware file, and then verify the checksum.
SHA256: 70e64d22601776eed0245542c5719b03c32582584b99bf9aef871d1fa38e55ef

Bug fixes and functionality modifications:
-The ARP response issue has been resolved, along with the connection issue between the router and the ROG Phone 6 and 7.
-Resolved the issue where the USB path is not displayed on the Media Server page in the AiMesh node
-Resolved the Download Master login issue. Please click the update link in the USB Application to update it.

Security updates:
-Fixed the cfg server vulnerability. Thanks to Swing and Wang Duo from Chaitin Security Research Lab.
-Fixed the vulnerability in the logmessage function CVE-2023-35086/ CVE-2023-35087. Thanks to Swing and Wang Duo from Chaitin Security Research Lab C0ss4ck from Bytedance Wuheng Lab, Feixincheng from X1cT34m.

Please unzip the firmware file, and then verify the checksum.
SHA256: 010e981dc9f6f412d9c5c8a3db9bbe483ea73e4e4c9299d04e63a1a3e3d75831

Bug fixes and functionality modifications:
- Resolved the issue with login and password changes.
- Resolved the IPSec VPN connection issues.
- Resolved the Instant Guard connection issues.
- Fixed the AiCloud login issue after unplugging and plugging the HDD into the USB port.
- Fixed the issue where Traffic Analyzer sometimes couldn't record data.
- Fixed the time display issue for the preferred upgrade time in the Auto Firmware Upgrade function.
- Fine-tuned the description for port status.
- Enabled DynDNS and No-IP DDNS to use IPv6.
- Fixed AiMesh preferred AP identification in site survey results.
- Updated timezone list for Greenland, Mexico, and Iran.
- Fixed the dual WAN setting problem that prevented 10G configuration as primary or secondary WAN.
- Modified the USB application option text in dual WAN.
- Allowed WireGuard Server clients to access the Samba server.
- Fixed memory leak issue.
- Enabled the failback function when using the iOS/Android USB backup WAN.

Security updates:
- Enabled and supported ECDSA certificates for Let's Encrypt.
- Enhanced protection for credentials.
- Enhanced protection for OTA firmware updates

Please unzip the firmware file first then check the MD5 code.
MD5: 5c8f9075072163ea2d4e9583acbb9a0d

New features:
-Built-in Surfshark in VPN Fusion allows you to surf the internet anonymously and securely from anywhere by encrypting connections. Please refer to https://asus.click/SurfsharkVPN

-iPhone/Android USB auto backup WAN allows you to connect your phone to the router’s USB port and use it as an internet source. Please refer to https://asus.click/AutobackupWAN

-DDNS transfer allows you to transfer your ASUS DDNS hostname from your original router to the new one. Please refer to https://asus.click/ASUSDDNS

Security fixes:
-Fixed DoS vulnerabilities in firewall configuration pages.
-Fixed DoS vulnerabilities in httpd.
-Fixed information disclosure vulnerability.
-Fixed CVE-2023-28702 and CVE-2023-28703.
-Fixed null pointer dereference vulnerabilities.

Please unzip the firmware file first then check the MD5 code.
MD5: be4d40fe0f1c6fd4b5c6e7a1e6cf9a14

Be noted: This is an early stage beta, there might be bugs. This version can be downgraded via web GUI only.

1. Recap new features of 3.0.0.6.102: Guest network Pro(SDN), VLAN, Auto USB WAN backup, iPhone tethering, Multi-services WAN.
2. Re-defined VLAN, supports Trunk, Access mode with VLAN-only-network.
3. Synchronize Guest network pro (SDN) with VLAN, create/delete new VLAN-only-network will create/delete a new profile in Guest network as well.
4. Port isolation and AP isolation to restrict device access to each other.
5. Re-defined multi-service WAN, disable it by default.
6. Add surfshark VPN in VPN fusion.

Please unzip the firmware file first then check the MD5 code.
MD5: f3be73a059e2392c25b4145787e74eb6

1.Fixed CVE-2022-46871
2.Fixed Client DOM Stored XSS.
3.Improved AiMesh backhaul stability.
4.Fixed AiMesh topology UI bugs.
5.Fixed the reboot issue when assigning specific clients in VPN fusion.
6.Fixed the VPN fusion bug when importing the Surfshark WireGuard conf file.
7.Fixed network map bugs.

Please unzip the firmware file first then check the MD5 code.
MD5: 16d57e8b9e66989802820adbb179fb28

1. Fixed multi-language GUI bugs
2. Improved system stability

Please unzip the firmware file first then check the MD5 code.
MD5: 9e8a2081be9d410fde7336a94b334892

Be noted: This is an early stage beta, there might be bugs. This version can be downgraded via web GUI only.

New Features:
1. Add Guest Network Pro:
• Kids WiFi: Create a network for kids that blocks access to adult content and has a schedule to control when the network is available.
• VPN WiFi: Create a VPN network that connects to 3rd party VPN services or with ASUS site to site VPN(https://www.asus.com/support/FAQ/1048281/) to encrypts your internet connection and hides your IP address to protect your online activities from being tracked or monitored.
• IoT WiFi : Create an IoT (Internet of Things) network that blocks malicious traffic* and only allows 2.4GHz devices to connect.
• Guest WiFi: Create a guest network with a WiFi schedule and access rights to control when and how guests can use the network.
2. Add VLAN in LAN settings.
3. Add Auto USB WAN backup, while primary WAN is down, plug USB phone/dongle will auto enable backup internet, no setup is required.
4. Add iPhone USB tethering. (Please make sure hotspot on iPhone is enabled).
5. Add Multi-services WAN, create multiple profiles on a single WAN interface.

Please unzip the firmware file first then check the MD5 code.
MD5: 87c220d16d6aeccc8581134cb6c531d1

Try more on ASUSWRT 2022 with new features at https://asus.click/ASUSWRT2022
1. Supported WireGuard VPN server and client.
2. Supported VPN fusion. It can easily achieve VPN connection to network devices like Smart TV, Game consoles and without installing the VPN client software.
3. Supported new devices connection notification.
4. Supported connection diagnostic on the ASUS router app.
5. Supported Instant Guard 2.0 which helps easily invite family or friends to join the VPN connection.
6. Upgraded parental control and added reward, new scheduler for flexible setting
7. Fixed HTTP response splitting vulnerability. Thanks to Efstratios Chatzoglou, University of the Aegean.
8. Fixed status page HTML vulnerability. Thanks to David Ward.
9. Fixed CVE-2018-1160. Thanks to Steven Sroba.
10. Fixed cfg_server security issue.

Please unzip the firmware file first then check the MD5 code.
MD5: 188389cc06ad58ee4655ec35b9e12954

- Fixed CVE-2021-42386, CVE-2021-42384, CVE-2021-42382, CVE-2021-42383, CVE-2021-42379, CVE-2021-42380, CVE-2021-42385, CVE-2021-30065.
- Fixed CVE-2019-17362, CVE-2022-28391.
- Updated Strongswan to 5.9.6 for CVE-2021-45079.
- Updated OpenVPN to 2.4.12 for CVE-2022-0547.
- Improved system and connection stability.
- Added HE.NET to DDNS support list.
- Fixed device isolation issues in the guest network.

Please unzip the firmware file first then check the MD5 code.
MD5: b12b011e49efe3dd52737a38c3e7d383

Initial release

Please unzip the firmware file first then check the MD5 code.
MD5: 50490f09f448093bf35f128ec5d3e900