The new release improves WebUI against CSS/XSS attacks

Dec 17, 2016 07:01 GMT  ·  By

AsusWrt-Merlin has announced the availability of new firmware packages targeted at several of ASUS’ router models, namely version 380.64.0, which manages to improved WebUI protection against CSS/XSS attacks, as well as update nano (2.7.1) and OpenVPN (2.3.14).

In addition to that, the present release applies Curl version 7.51.0 to resolve various security and stability issues, forces QoS Stats info to automatically refresh every 3 seconds, enables IPv6 support in curl, and fixes web server crashes encountered when importing an invalid key ovpn file.

Moreover, version 380.64.0 also implements a stable firmware availability notification feature, adds iptables MASK support on MIPS kernels, removes unnecessary Download Master packages, and includes other changes as highlighted in the Release Notes below.

If you intend to make use of these enhancements, first know that the developer has provided installation files compatible only with ASUS’ RT-N66 (U B1, R, W), RT-AC88U, RT-AC87 (R, U), RT-AC68 (P, R,W ,U), RT-AC66 (W, U, R), RT-AC56 (R, U, S), RT-AC5300, RT-AC3200, and RT-AC3100 routers.

Therefore, if supported, save the appropriate package for your device model, unzip it, establish a wired connection between the router and your computer, and go to Advanced Settings > Administration > Firmware Upgrade.

Afterward, near the “New Firmware File” section, hit the “Choose File” button, navigate and select the .trx file, click “Upload,” and wait patiently as the upgrade is performed. Also, to avoid any problems and malfunctions, make sure not to interrupt this process in any way.

With this in mind, download AsusWrt-Merlin Router Firmware 380.64.0 for your specific device, apply it, and constantly check our website to stay informed when newer versions are available for your device.

Release Notes