Deviceways

Router

ASUS RT-AC58U

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
A1 · Qualcomm IPQ4018
Open hardware record
v2 · Qualcomm Atheros QCA9888 Wi-Fi
Processor: Qualcomm QCN5502Open hardware record Release listed · 25.12.5
v3
Get firmware Release listed · 25.12.5
Qualcomm Atheros IPQ4018 Wi-Fi · Qualcomm Atheros IPQ4018
Get OpenWrt firmware Release listed · 25.12.6
v2 · Qualcomm Atheros QCA9888 / Qualcomm QCN5502 Wi-Fi
Get OpenWrt firmware Release listed · 25.12.6
Hardware revision not specified
Open hardware record Release listed · 25.12.5
Original project github.com

Qualcomm Atheros IPQ4018 Wi-Fi · Qualcomm Atheros IPQ4018

First installation
TFTP generic; Serial

v2 · Qualcomm Atheros QCA9888 / Qualcomm QCN5502 Wi-Fi

Limitations
2.4GHz WiFi
First installation
TFTP generic
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

ASUS RT-AC58U v2 — TechInfoDepot (github.com)

Hardware revision
v2

Device details

ASUS RT-AC58U v3 — TechInfoDepot (github.com)

Hardware revision
v3

Device details

ASUS RT-AC58U — TechInfoDepot (github.com)

Hardware revision
A1

Device details

ASUS RT-AC58U — WikiDevi (github.com)

Hardware revision
v1 (A1)

OpenWrt · Qualcomm Atheros IPQ4018 Wi-Fi · Qualcomm Atheros IPQ4018

OpenWrt · Qualcomm Atheros IPQ4018 Wi-Fi · Qualcomm Atheros IPQ4018 — Source documentation (openwrt.org)

Installation routes recorded
TFTP generic, Serial
Availability recorded by source
Discontinued

Device details

Device details — v2 — Source documentation (openwrt.org)

Hardware revision
v2

OpenWrt · v2 · Qualcomm Atheros QCA9888 / Qualcomm QCN5502 Wi-Fi

OpenWrt · v2 · Qualcomm Atheros QCA9888 / Qualcomm QCN5502 Wi-Fi — v2 — Source documentation (openwrt.org)

Installation routes recorded
TFTP generic
Availability recorded by source
Discontinued

Hardware differences

Technical references

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

ASUS RT-AC58U

A cross site scripting (XSS) vulnerability on ASUS RT-AC58U 3.0.0.4.380_6516 devices allows remote attackers to inject arbitrary web script or HTML via Advanced_ASUSDDNS_Content.asp,…

CVE-2018-18291

Affected firmware
RT-AC58U: 3.0.0.4.380_6516
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

A cross site scripting (XSS) vulnerability on ASUS RT-AC58U 3.0.0.4.380_6516 devices allows remote attackers to inject arbitrary web script or HTML via Advanced_ASUSDDNS_Content.asp, Advanced_WSecurity_Content.asp, Advanced_Wireless_Content.asp, Logout.asp, Main_Login.asp, MobileQIS_Login.asp, QIS_wizard.htma, YandexDNS.asp, ajax_status.xml, apply.cgi, clients.asp, disk.asp, disk_utility.asp, or internet.asp.

CVE published

ASUS RT-AC58U

On ASUS RT-AC58U 3.0.0.4.380_6516 devices, remote attackers can discover hostnames and IP addresses by reading dhcpLeaseInfo data in the HTML source code of the Main_Login.asp page.

CVE-2018-18287

Affected firmware
RT-AC58U: 3.0.0.4.380_6516
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
Public disclosure CVE updated

On ASUS RT-AC58U 3.0.0.4.380_6516 devices, remote attackers can discover hostnames and IP addresses by reading dhcpLeaseInfo data in the HTML source code of the Main_Login.asp page.

CVE published

ASUS RT-AC58U

ASUS RT-AC51U, RT-AC58U, RT-AC66U, RT-AC1750, RT-ACRH13, and RT-N12 D1 routers with firmware before 3.0.0.4.380.8228; RT-AC52U B1, RT-AC1200 and RT-N600 routers with firmware before…

CVE-2018-8826

Affected firmware
Version details in source scope
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
Public disclosure CVE updated

ASUS RT-AC51U, RT-AC58U, RT-AC66U, RT-AC1750, RT-ACRH13, and RT-N12 D1 routers with firmware before 3.0.0.4.380.8228; RT-AC52U B1, RT-AC1200 and RT-N600 routers with firmware before 3.0.0.4.380.10446; RT-AC55U and RT-AC55UHP routers with firmware before 3.0.0.4.382.50276; RT-AC86U and RT-AC2900 routers with firmware before 3.0.0.4.384.20648; and possibly other RT-series routers allow remote attackers to execute arbitrary code via unspecified vectors.

CVE published

ASUS RT-AC58U

Stack buffer overflow in httpd in Asuswrt-Merlin firmware 380.67_0RT-AC5300 and earlier for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U,…

CVE-2017-12754

Affected firmware
Version details in source scope
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
Public disclosure CVE updated

Stack buffer overflow in httpd in Asuswrt-Merlin firmware 380.67_0RT-AC5300 and earlier for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66U_B1, RT-AC58U, RT-AC56U, RT-AC55U, RT-AC52U, RT-AC51U, RT-N18U, RT-N66U, RT-N56U, RT-AC3200, RT-AC3100, RT_AC1200GU, RT_AC1200G, RT-AC1200, RT-AC53, RT-N12HP, RT-N12HP_B1, RT-N12D1, RT-N12+, RT_N12+_PRO, RT-N16, and RT-N300 devices allows remote attackers to execute arbitrary code on the router by sending a crafted http GET request packet that includes a long delete_offline_client parameter in the url.

CVE published

ASUS RT-AC58U

Stack-based buffer overflow in ASUS_Discovery.c in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U,…

CVE-2017-11420

Affected firmware
Version details in source scope
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
Public disclosure CVE updated

Stack-based buffer overflow in ASUS_Discovery.c in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66U_B1, RT-AC58U, RT-AC56U, RT-AC55U, RT-AC52U, RT-AC51U, RT-N18U, RT-N66U, RT-N56U, RT-AC3200, RT-AC3100, RT_AC1200GU, RT_AC1200G, RT-AC1200, RT-AC53, RT-N12HP, RT-N12HP_B1, RT-N12D1, RT-N12+, RT_N12+_PRO, RT-N16, and RT-N300 devices allows remote attackers to execute arbitrary code via long device information that is mishandled during a strcat to a device list.

Check more security advisories for this device · CVE.org