Skip to content

Comment on Remote code execution in Asus router firmware

Comments

Warning to users of Asus firmware:

In the Administration > Firmware Upgrade tab, never rely on their [Check] version button. It's consistently inaccurate. It's a long-known (and serious) flaw that's been like this since day one of these products and still to this day. It'll happily report, "The router's current firmware is the latest version.", even if it's months behind in vulnerability fixes. Go to Asus' site for the latest firmware then use the upload option to upgrade. Or, probably better yet, don't use their firmware.

Thanks for the tip this is exactly what I had to do to get the latest firmware upgrade with the patch.

note to anyone not using openwrt:

you should be using openwrt :)

AsusWRT is pretty great on its own, apart from this bug, and its kept uptodate.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.