ASUS ZenWiFi BE14000

- Enhanced system stability.
- Enhanced input validation and refactored legacy string handling routines to ensure robust memory management.
- Mitigated security risks in AiCloud service by enforcing strict credential verification, implementing robust file path validation, and hardening command execution logic to prevent unauthorized access and manipulation of system resources.
- Implemented comprehensive validation and expanded command filtering in the web history API.
- Strengthened input validation and directory handling in the VPN configuration upload interface.
- Fixed an issue that allowed certain user settings to be bypassed, improving overall user control and protection.

Important: After installing this firmware, we strongly recommend performing a factory-default reset to activate every new security adjustment.

Security Enhancements
- Password Policy Upgrade – Minimum of 10 characters, including at least one letter, one digit, and one special character; disallows consecutive identical characters; hardens defense against brute-force attacks.
- HTTPS on 8443 – Management interface now served over TLS by default.
- UPnP Disabled – Universal Plug and Play starts in the off state for reduced surface exposure.
- AiCloud Authentication Hardening (CWE-287) – Added layered verification.
- Authentication Logic Refactor – Removed redundant code paths for a lean sign-in flow.
- Memory Safety Guard (CWE-476) – Introduced null-reference protections across critical services.
- Enhanced IPsec Parameter Validation – The existing input checks have been hardened.
- Data Exposure Mitigation (CWE-200) – Reinforced controls on sensitive pathways.
- Detailed Audit Trails – Expanded logging within the authentication module.

System Improvements
- Connection Stability – Core algorithms refined for steadier links.
- Scheduling Accuracy – Timed tasks execute reliably under PPPoE, PPTP and L2TP WAN modes.
- Client List Maintenance – Resolved an issue that prevented offline devices from being removed from the client list

- Fixed an issue where MLO devices continued to appear in the client list even after the "MLO Fronthaul for Clients" feature was disabled.
- Fixed a UI freeze issue that occurred when switching to the WPS page after unchecking 2.4G (leaving only 5G) for the main network SSID.
- Fixed an issue where changes to the IPSec VPN Server settings could not be saved properly.
- Addressed issues related to the MLO UI.
- Optimized LAN Aggregation settings to enhance network performance and stability.

Added a "Hide Backhaul SSID" option. Enabling this feature will disable the random SSID.
Support 10G DS-Lite (Xpass and transix)
Support 10G Hikari Cross (v6plus and OCN Virtual Connect)
Optimized the stability of IoT device connections.
Fixed a potential DNS Open Resolver vulnerability
Fixed a potential crash issue related to prolonged usage of AiProtection
Fixed an issue where the SSID was not discoverable by clients when configuring WPA2/WPA3 Enterprise security.
Fixed a problem where Now TV IPTV was unable to obtain an IP address.
Fixed an issue in AiMesh where nodes with poor uplink connection status were not being optimized after any node joined the router.
Fixed a WiFi crash issue caused by certain feature configurations.

1. Fixed the UI issue in Chrome.
2. Fixed client binding issues in Mesh scenarios.
3. Enhanced input parameter handling techniques to improve data processing stability and system security.
4. Enhance system access control mechanisms.
5. Fixed an issue that allowed clients to ping the router from the Internet when AiProtection was enabled.
6. Resolved the problem where a LAN PC connected to the WAN port of an AiMesh node could not obtain an IP address.
7. Optimized the AiMesh roaming mechanism.

New Add
- Added support for the IPv6 Option WAN type.

Bug Fixes and Enhancements：
- Improved AiMesh backhaul stability.
- Optimized memory management mechanisms, improving system efficiency and stability.
- Strengthened input validation and data processing workflows, further protecting your information security.
- Improved web rendering engine, enhancing browsing experience and security.
- Enhanced security of system command processing to guard against potential malicious operations.
- Perfected JavaScript-related security mechanisms, offering a more secure web interaction environment.
- Enhanced AiCloud password protection mechanisms, safeguarding against unauthorized access attempts.
- Enhanced input parameter handling techniques to improve data processing stability and system security.
- Enhance system access control mechanisms.
- Fixed the issue where devices do not appear in the client list after connecting to the ASUS router.
- Fixed the malfunction of the "Prefer AP" feature.
- Fixed the connectivity issue with Apple wireless devices.
- Corrected the issue where the wireless network settings page disappears in AP mode on the WebGUI.
- Addressed potential irregularities in AiProtection.

This Beta version addresses the issue of displaying random SSIDs and improves iPhone connection compatibility. Please ensure that both the AiMesh router and node are updated simultaneously to prevent any connectivity issues between the node and the AiMesh router.
Please refer to FAQ for AiMesh node firmware update.
https://www.asus.com/support/faq/1035199/

Enhancements:
Optimized stability and efficiency of the AiMesh system.

Bug Fixes:
Resolved LAN device disconnections after SDN configuration.
Fixed compatibility issues with older models, preventing WiFi malfunctions after SDN settings.
Fixed an issue that could lead to system failures following a reboot.
Fixed UI issues during VPN file export.

Please unzip the firmware file, and then verify the checksum.
SHA256: 337324dde8850dde15d0c8fbc5c0ef1ea837bbc5b909545a56a2ff39db209a7c

1. Strengthened input validation and data processing workflows to further protect information security.
2. Enhanced AiCloud password protection mechanisms, safeguarding against unauthorized access attempts.
3. Enhanced device security through improved buffer handling in connection features.
4. Refined data handling processes, ensuring secure and accurate information management.
5. Enhanced file access control mechanisms, promoting a more secure operating environment.
6. Strengthened certificate protection, providing enhanced data security.