Router

ASUS RT-N12E

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
B1 · MediaTek MT7620N Wi-Fi
Retired support documentedOpen hardware record
C1 · MediaTek MT7628N
Open hardware record
B1 · MediaTek MT7620N
Open hardware record

B1 · MediaTek MT7620N Wi-Fi

Device support in source
Retired; check the documented hardware and older release resources.
First installation
U-Boot TFTP recovery
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

asus rt-n12e b1 — device documentation (github.com)ASUS RT-N12E B1 — TechInfoDepot (github.com)ASUS RT-N12E B1 — WikiDevi (github.com)

Hardware revision
B1

Device details

ASUS RT-N12E C1 — TechInfoDepot (github.com)

Hardware revision
C1

Device details

ASUS RT-N12E — TechInfoDepot (github.com)ASUS RT-N12E — WikiDevi (github.com)

Hardware revision
(LX)

Device details

ASUS RT-N12E C1 — WikiDevi (github.com)

Hardware revision
C1

Device details

Device details — Source documentation (openwrt.org)

Hardware revision
B1

OpenWrt · B1 · MediaTek MT7620N Wi-Fi

OpenWrt · B1 · MediaTek MT7620N Wi-Fi — Source documentation (openwrt.org)

Installation routes recorded
U-Boot TFTP recovery
Recovery routes recorded
U-Boot TFTP recovery
Availability recorded by source
Discontinued

Hardware differences

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVSS 7.5 (v3.1)

ASUS RT-N12E

Asus RT-N12E 2.0.0.39 is affected by an incorrect access control vulnerability

CVE-2020-23648

Affected firmware
RT-N12E: 2.0.0.39
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources

Asus RT-N12E 2.0.0.39 is affected by an incorrect access control vulnerability. Through system.asp / start_apply.htm, an attacker can change the administrator password without any authentication.

CVSS 4.8 (v4.0)

RT-N12E

A cross-site scripting (XSS) vulnerability in the RT-N10E/ RT-N12E 2.0.0.x firmware

CVE-2025-1354

Affected firmware
before 2.0.0.39
Fix
Note: All versions of RT-N10E and RT-N12E are unsupported (End-of-Life, EOL).
Read VulDB CVE record
Details and sources

A cross-site scripting (XSS) vulnerability in the RT-N10E/ RT-N12E 2.0.0.x firmware . This vulnerability caused by improper input validation and can be triggered via the manipulation of the SSID argument in the sysinfo.asp file, leading to disclosure of sensitive information. Note: All versions of RT-N10E and RT-N12E are unsupported (End-of-Life, EOL). Consumers can mitigate this vulnerability by disabling the remote access features from WAN

VDB-295962 | Asus RT-N12E sysinfo.asp cross site scripting — RT-N12E (vuldb.com) ↗VDB-295962 | CTI Indicators (IOB, IOC, TTP, IOA) — RT-N12E (vuldb.com) ↗Submit #496013 | ASUS RT-N12E 2.0.0.19 Cross Site Scripting — RT-N12E (vuldb.com) ↗

ASUS RT-N12E

Session hijack vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P,…

CVE-2017-6549

Affected firmware
Version details in source scope
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources

Session hijack vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B1, RT-AC3200, RT-AC53U, RT-AC1750, RT-AC1900P, RT-N300, and RT-AC750 routers with firmware before 3.0.0.4.380.7378; RT-AC68W routers with firmware before 3.0.0.4.380.7266; and RT-N600, RT-N12+ B1, RT-N11P B1, RT-N12VP B1, RT-N12E C1, RT-N300 B1, and RT-N12+ Pro routers with firmware before 3.0.0.4.380.9488; and Asuswrt-Merlin firmware before 380.65_2 allows remote attackers to steal any active admin session by sending cgi_logout and asusrouter-Windows-IFTTT-1.0 in certain HTTP headers.

41572 — ASUS RT-N12E (exploit-db.com) ↗Security advisory asuswrt — ASUS RT-N12E (bierbaumer.net) ↗

ASUS RT-N12E

Buffer overflows in networkmap on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+,…

CVE-2017-6548

Affected firmware
Version details in source scope
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources

Buffer overflows in networkmap on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B1, RT-AC3200, RT-AC53U, RT-AC1750, RT-AC1900P, RT-N300, and RT-AC750 routers with firmware before 3.0.0.4.380.7378; RT-AC68W routers with firmware before 3.0.0.4.380.7266; and RT-N600, RT-N12+ B1, RT-N11P B1, RT-N12VP B1, RT-N12E C1, RT-N300 B1, and RT-N12+ Pro routers with firmware before 3.0.0.4.380.9488; and Asuswrt-Merlin firmware before 380.65_2 allow remote attackers to execute arbitrary code on the router via a long host or port in crafted multicast messages.

41573 — ASUS RT-N12E (exploit-db.com) ↗Security advisory asuswrt — ASUS RT-N12E (bierbaumer.net) ↗

ASUS RT-N12E

Cross-site scripting (XSS) vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P,…

CVE-2017-6547

Affected firmware
Version details in source scope
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources

Cross-site scripting (XSS) vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B1, RT-AC3200, RT-AC53U, RT-AC1750, RT-AC1900P, RT-N300, and RT-AC750 routers with firmware before 3.0.0.4.380.7378; RT-AC68W routers with firmware before 3.0.0.4.380.7266; and RT-N600, RT-N12+ B1, RT-N11P B1, RT-N12VP B1, RT-N12E C1, RT-N300 B1, and RT-N12+ Pro routers with firmware before 3.0.0.4.380.9488 allows remote attackers to inject arbitrary JavaScript by requesting filenames longer than 50 characters.

41571 — ASUS RT-N12E (exploit-db.com) ↗Security advisory asuswrt — ASUS RT-N12E (bierbaumer.net) ↗
Check more security advisories for this device · CVE.org