Fix 9 security vulnerabilities, Asustek urges router users to upgrade firmware as soon as possible

CTOnews.com, June 20 (Xinhua)-- Asustek today released new firmware with cumulative security updates, covering many of its router models, fixed nine security vulnerabilities, and urged users to upgrade as soon as possible.

Among the nine security vulnerabilities fixed this time, tracking numbers CVE-2022-26376 and CVE-2018-1160 are the most destructive, which exist in the Asuswrt firmware of the Asustek router, which can cause memory corruption, put the router into a denial of service state (denial-of-services), or execute malicious code.

Another "critical" vulnerability dates back to the CVE-2018-1160 vulnerability five years ago, caused by cross-border writing of Netatalk vulnerabilities that can execute arbitrary code on unpatched devices.

The list of affected devices includes the following models: GT6, GT-AXE16000, GT-AX11000 PRO, GT-AX6000, GT-AX11000, GS-AX5400, GS-AX3000, XT9, XT8, XT8 V2, RT-AX86U PRO, RT-AX86U, RT-AX86S, RT-AX82U, RT-AX58U, RT-AX3000, TUF-AX6000 and TUF-AX5400.

CTOnews.com is attached to the Asustek official support page and firmware announcement link. Users who need it can click on upgrade.