WORLDTECHASUS Ships Emergency Firmware to Close Wi-Fi 7 Router Authentication Flaw
AI illustrationASUS has released an urgent security update for its latest Wi-Fi 7 routers to fix an improper authentication vulnerability that can give an attacker full administrator access without credentials. The company is urging owners of affected models to install the patched firmware as soon as possible.
Which routers and firmware are affected
According to the report, the flaw affects router models currently running the 3.0.0.6_102 firmware series within ASUS's newest Wi-Fi 7 lineup. ASUS describes the issue as an improper authentication problem in its official security advisory.
The advisory states that an unauthenticated attacker situated on an adjacent network can bypass security protocols and obtain complete administrative control of the router. The attacker does not need a password to do so.
Why the adjacent-network condition matters
The attack requires the attacker to be on an adjacent network rather than reaching the device across the internet. That condition narrows the threat, since a hostile party must be in relative local proximity to the network.
Even so, the ability to take over a network's central hub without any credentials is considered a critical risk, because the router controls traffic for every device connected to it.
Interim measures and reported severity
For administrators who cannot install the new firmware immediately, ASUS has set out several temporary mitigations intended to reduce the attack surface. The report says three high-severity flaws are being patched, with severity scores reaching 8.7.
Until the fixes are installed, the report recommends that users either update at once or disable remote access to their routers.
Open questions
- Are routers outside the 3.0.0.6_102 firmware series also affected?
- Is there evidence that the flaw has been exploited in practice?