Deviceways

Router

ASUS RT-AC3200

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
A
Open hardware record
v1
Get OpenWrt firmware Release listed · 25.12.6
Original project github.com

v1

Limitations
White LAN & WAN LED
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

ASUS RT-AC3200 — TechInfoDepot (github.com)ASUS RT-AC3200 — WikiDevi (github.com)

Hardware revision
A
Hardware revision
A (2.34)

Device details

Device details — Source documentation (openwrt.org)

Hardware revision
v1

OpenWrt · v1

OpenWrt · v1 — Source documentation (openwrt.org)

Recovery routes recorded
Asus Firmware Restoration tool, CFE TFTP recovery, CFE web recovery
Availability recorded by source
Available 2024

Hardware differences

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

ASUS RT-AC3200

System command injection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute system commands via the "load_script" URL parameter.

CVE-2018-14714

Affected firmware
RT-AC3200: 3.0.0.4.382.50010
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

System command injection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute system commands via the "load_script" URL parameter.

CVE published

ASUS RT-AC3200

Format string vulnerability in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to read arbitrary sections of memory and CPU registers via the "hook" URL parameter.

CVE-2018-14713

Affected firmware
RT-AC3200: 3.0.0.4.382.50010
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

Format string vulnerability in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to read arbitrary sections of memory and CPU registers via the "hook" URL parameter.

CVE published

ASUS RT-AC3200

Buffer overflow in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to inject system commands via the "hook" URL parameter.

CVE-2018-14712

Affected firmware
RT-AC3200: 3.0.0.4.382.50010
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

Buffer overflow in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to inject system commands via the "hook" URL parameter.

CVE published

ASUS RT-AC3200

Missing cross-site request forgery protection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to cause state-changing actions with specially crafted URLs.

CVE-2018-14711

Affected firmware
RT-AC3200: 3.0.0.4.382.50010
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

Missing cross-site request forgery protection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to cause state-changing actions with specially crafted URLs.

CVE published

ASUS RT-AC3200

Cross-site scripting in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute JavaScript via the "hook" URL parameter.

CVE-2018-14710

Affected firmware
RT-AC3200: 3.0.0.4.382.50010
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

Cross-site scripting in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute JavaScript via the "hook" URL parameter.

Check more security advisories for this device · CVE.org