Security Fixes
- Strengthened data handling in Networks configuration functions.
- Improved data validation in Networks rule list processing.
- Fixed a data-handling issue in the DNS query caching component.
- Strengthened verification when a software component downloads - external resources, improving connection security.
- Adjusted the information response mechanism of the device discovery service, strengthening protection of device information.
- Fixed a data-handling issue in a firmware component on a specific model.
- Improved data-display handling in a web function to enhance browsing security.
- Strengthened input data validation in a device-pairing web function.
- Improved data validation in the configuration file upload/sync function.
- Improved how the account service restart process is handled.
- Removed a non-essential internal function endpoint, strengthening overall access control.
- Adjusted the debug file access mechanism, strengthening protection of internal data.
- Strengthened data handling in the system logging function.

We recommend upgrading to this version to maintain optimal protection.

This version of firmware is only applicable to ZenWiFi ET8 of HW Ver: 2.0, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.

Security Fixes
Enhanced DNS Handling: Improved DNS name processing to address potential memory issues that could occur in rare cases during name format conversion, enhancing system security and robustness.
Strengthened Execution Module Safeguards: Improved protections for system execution modules to reduce the risk of unauthorized substitution during specific processes.

This version of firmware is only applicable to ZenWiFi ET8 of HW Ver: 1.0, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.

Security Fixes
- Enhanced DNS Handling: Improved DNS name processing to address potential memory issues that could occur in rare cases during name format conversion, enhancing system security and robustness.
- Strengthened Execution Module Safeguards: Improved protections for system execution modules to reduce the risk of unauthorized substitution during specific processes.

This version of firmware is only applicable to ZenWiFi ET8 of HW Ver: 2.0, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.

- Enhanced system stability.
- Enhanced input validation and refactored legacy string handling routines to ensure robust memory management.
- Addressed multiple security weaknesses in AiCloud service by enforcing strict credential verification, implementing robust file path validation, and hardening command execution logic to prevent unauthorized access and manipulation of system resources.
- Implemented comprehensive validation and expanded command filtering in the web history API.
- Strengthened input validation and directory handling in the VPN configuration upload interface.
- Fixed an issue that allowed certain user settings to be bypassed, improving overall user control and protection.

This version of firmware is only applicable to ZenWiFi ET8 of HW Ver: 1.0, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.

- Enhanced system stability.
- Enhanced input validation and refactored legacy string handling routines to ensure robust memory management.
- Addressed multiple security weaknesses in AiCloud service by enforcing strict credential verification, implementing robust file path validation, and hardening command execution logic to prevent unauthorized access and manipulation of system resources.
- Implemented comprehensive validation and expanded command filtering in the web history API.
- Fixed a privilege escalation vector in the IFTTT token exchange mechanism
- Strengthened input validation and directory handling in the VPN configuration upload interface.
- Fixed an issue that allowed certain user settings to be bypassed, improving overall user control and protection.

This version of firmware is only applicable to ZenWiFi ET8 of HW Ver: 1.0, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.
Important: After installing this firmware, we strongly recommend performing a factory-default reset to activate every new security adjustment.

Security Enhancements
- Password Policy Upgrade – Minimum of 10 characters, including at least one letter, one digit, and one special character; disallows consecutive identical characters; hardens defense against brute-force attacks.
- HTTPS on 8443 – Management interface now served over TLS by default.
- UPnP Disabled – Universal Plug and Play starts in the off state for reduced surface exposure.
- AiCloud Authentication Hardening (CWE-287) – Added layered verification.
- Authentication Logic Refactor – Removed redundant code paths for a lean sign-in flow.
- Memory Safety Guard (CWE-476) – Introduced null-reference protections across critical services.
- Enhanced IPsec Parameter Validation – The existing input checks have been hardened.
- Data Exposure Mitigation (CWE-200) – Reinforced controls on sensitive pathways.
- Detailed Audit Trails – Expanded logging within the authentication module.

System Improvements
- Connection Stability – Core algorithms refined for steadier links.
- Scheduling Accuracy – Timed tasks execute reliably under PPPoE, PPTP and L2TP WAN modes.
- Client List Maintenance – Resolved an issue that prevented offline devices from being removed from the client list

This version of firmware is only applicable to ZenWiFi ET8 of HW Ver: 2.0, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.

Improved compatibility with certain IoT devices.

This version of firmware is only applicable to ZenWiFi ET8 of HW Ver: 1.0, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.

Improved compatibility with certain IoT devices.

This version of firmware is only applicable to ZenWiFi ET8 of HW Ver: 2.0, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.

1. Fixed the UI issue in Chrome.
2. Fixed client binding issues in Mesh scenarios.
3. Enhanced input parameter handling techniques to improve data processing stability and system security.
4. Enhance system access control mechanisms.

This version of firmware is only applicable to ZenWiFi ET8 of HW Ver: 1.0, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.

1. Fixed the UI issue in Chrome.
2. Fixed client binding issues in Mesh scenarios.
3. Enhanced input parameter handling techniques to improve data processing stability and system security.
4. Enhance system access control mechanisms.

This version of firmware is only applicable to ZenWiFi ET8 of HW Ver: 2.0, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.

Please unzip the firmware file, and then verify the checksum.
SHA256: 2084b9f0fec4f62f771f51f09527b5b9cf61aee143a530400c7c19256738e2dd

1. Strengthened input validation and data processing workflows to further protect information security.
2. Enhanced AiCloud password protection mechanisms, safeguarding against unauthorized access attempts.
3. Enhanced device security through improved buffer handling in connection features.
4. Refined data handling processes, ensuring secure and accurate information management.
5. Enhanced file access control mechanisms, promoting a more secure operating environment.
6. Strengthened certificate protection, providing enhanced data security.

This version of firmware is only applicable to ZenWiFi ET8 of HW Ver: 1.0, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.

1. Strengthened input validation and data processing workflows to further protect information security.
2. Enhanced AiCloud password protection mechanisms, safeguarding against unauthorized access attempts.
3. Enhanced device security through improved buffer handling in connection features.
4. Refined data handling processes, ensuring secure and accurate information management.
5. Enhanced file access control mechanisms, promoting a more secure operating environment.
6. Strengthened certificate protection, providing enhanced data security.

Please unzip the firmware file, and then verify the checksum.
SHA256: 35c2502312ca69bb4c203e7df1a30e19f650671275bc07b9a2e6cf8ce13571ef

This version of firmware is only applicable to ZenWiFi ET8 of HW Ver: 2.0, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.

1. Optimized memory management mechanisms, improving system efficiency and stability.
2. Strengthened input validation and data processing workflows, further protecting your information security.
3. Improved web rendering engine, enhancing browsing experience and security.
4. Enhanced security of system command processing to guard against potential malicious operations.
5. Perfected JavaScript-related security mechanisms, offering a more secure web interaction environment.

Please unzip the firmware file, and then verify the checksum.
SHA256: 6a3fbf6319cf03abef33d55aa2f56175c77c328b313208b44874e99d0fefc686

This version of firmware is only applicable to ZenWiFi ET8 of HW Ver: 1.0, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.

1. Optimized memory management mechanisms, improving system efficiency and stability.
2. Strengthened input validation and data processing workflows, further protecting your information security.
3. Improved web rendering engine, enhancing browsing experience and security.
4. Enhanced security of system command processing to guard against potential malicious operations.
5. Perfected JavaScript-related security mechanisms, offering a more secure web interaction environment.

Please unzip the firmware file, and then verify the checksum.
SHA256: c3a9ee1b4a95207d72e0d6e1308ba28b0e3bf3ebb8fe47b3817011031754dfa8

This version of firmware is only applicable to ZenWiFi ET8 of HW Ver: 1.0, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.

New features:
1.Plug, Share & Surf: Turn Your ET8 into a 4G/5G Hotspot. Unleash the power of 4G and 5G connectivity without the need for a new router. With your ASUS router and smartphone, you can access high-speed internet instantly. It's as simple as plugging in your phone and sharing its network. Please refer to https://asus.click/AutobackupWAN
2.DDNS transfer allows you to transfer your ASUS DDNS hostname from your original router to the new one. Please refer to https://asus.click/ASUSDDNS
3.Built-in Surfshark in VPN Fusion allows you to surf the internet anonymously and securely from anywhere by encrypting connections. Please refer to https://asus.click/SurfsharkVPN
4.Supported WireGuard VPN server and client.
5.Supported VPN fusion. It can easily achieve VPN connection to network devices like Smart TV, Game consoles and without installing the VPN client software.
6.Supported new devices connection notification.
7.Supported connection diagnostic on the ASUS router app.
8.Supported Instant Guard 2.0 which helps easily invite family or friends to join the VPN connection.
9.Upgraded parental control and added reward, new scheduler for flexible setting

Security updates:
1.Enabled and supported ECDSA certificates for Let's Encrypt.
2.Allowed binding DDNS to a user's account to reduce the risk of MITM attacks
3.Enhanced protection for credentials.
4.Enhanced protection for OTA firmware updates.
5.Fixed CVE-2023-34359,CVE-2023-34358 Unauthenticated Denial of Service
6.Fixed CVE-2023-34360 Stored XSS
7.Fixed DoS vulnerabilities in firewall configuration pages.
8.Fixed DoS vulerabilities in httpd.
9.Fixed information disclosure vulnerability.
10.Fixed CVE-2023-28702 and CVE-2023-28703.
11.Fixed null pointer dereference vulnerabilities.
12.Fixed the cfg server vulnerability.
13.Fixed the vulnerability in the logmessage function CVE-2023-35086/ CVE-2023-35087.
14.Fixed lighttpd vulnerability, CVE-2023-35720.
15.Fixed several curl vulnerabilities including CVE-2023-28322, CVE-2023-28321, and CVE-2023-28319.
16.Fixed FFmpeg vulnerabilities, specifically CVE-2022-3964, CVE-2022-48434, and CVE-2022-3109.
17.Fixed openssl vulnerability, CVE-2023-0464.
18.Fixed ReadyMedia vulnerabilitym CVE-2020-28926.
19.Fixed UPnP vulnerability CVE-2020-12695.
20.Patched a command injection vulnerability to improve overall security.
21.Strengthened protection against SSH brute force attacks.
22.Fixed the cfg server vulnerability.
23.Fixed the vulnerability in the logmessage function.
24..Fixed CVE-2022-46871
25.Fixed Client DOM Stored XSS.

Please unzip the firmware file, and then verify the checksum.
SHA256: 152c72bd808cb03656c32d910cf5e2ffc1e80abefa3c494637240acc107599c7

This version of firmware is only applicable to ZenWiFi ET8 of HW Ver: 1.0, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.

1. Fixed OpenSSL CVE-2022-0778
2. Fixed CVE-2018-1160, Thanks to Steven Sroba
3. Added more security measures to block malware.
4. Fixed Stored XSS vulnerability. Thanks to Milan Kyselica of IstroSec.
5. Fixed CVE-2021-34174, CVE-2022-23970, CVE-2022-23971, CVE-2022-23972, CVE-2022-23973, CVE-2022-25595, CVE-2022-25596, CVE-2022-25597, CVE-2022-26376
6. Improved system stability.
7. Fixed anomalous 802.11 frame issues.
Thanks to Kari Hulkko and Tuomo Untinen from The Synopsys Cybersecurity Research Center (CyRC). Issue was found by using Defensics Fuzz Testing Tool.
8. Added 3rd party DNS server list in WAN --> DNS to help users enhance the connection security.
9. Supported Safe Browsing in the router app to filter explicit content from search results. You can set it in the router app --> Devices or Family.


Please unzip the firmware file first then check the MD5 code.
MD5: e295c9ecd9862be4fb561ad7e907198a

This version of firmware is only applicable to ZenWiFi ET8 of HW Ver: 1.0, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.

Security
- Fixed string format stacks vulnerability
- Fixed cross-site-scripting vulnerability
- Fixed informational vulnerability.
Thanks to Howard McGreehan.

-Fixed SQL injection vulnerability
-Fixed json file traversal vulnerability
-Fixed plc/port file traversal vulnerability
-Fixed stack overflow vulnerability
Thanks to HP of Cyber Kunlun Lab

-Fixed authenticated stored XSS vulnerability
Thanks to Luke Walker – SmartDCC

-Fixed LPD denial of service vulnerability
-Fixed cfgserver heap overflow vulnerability
-Fixed cfgserver denial of service vulnerability
Thanks to TianHe from BeFun Cyber Security Lab.

Added more ISP profile
Digi 1 - TM
Digi 2 - TIME
Digi 3 - Digi
Digi 4 - CTS
Digi 5 - ALLO
Digi 6 - SACOFA
Maxis - CTS
Maxis - SACOFA
Maxis - TNB/ALLO

Fixed AiMesh guest network issues.
Fixed DDNS issues where the WAN IP is IPv6
Fixed UI bugs in Administration --> feedback.
Fixed time zone error.
Improved the connection stability.

Please unzip the firmware file first then check the MD5 code.
MD5:43ba6c19098258cfa685f08ecf2a1e16

This version of firmware is only applicable to ZenWiFi ET8 of HW Ver: 1.0, please check the product label before utilizing. You can check the hardware version from the product SN label or box label.
Initial release

Please unzip the firmware file first then check the MD5 code.
MD5: f9156c1386dbcc5f83eb1d21f23d2383