Authentication Bypass in ASUS DSL Series Routers

Successful exploitation can give a remote attacker unauthorized administrative access to the router. From that position, the attacker may modify router configuration, change security settings, hijack or reroute network traffic, observe or intercept communications traversing the device, access sensitive information in transit, and potentially use the router as a foothold to affect connected systems. ASUS also notes that this class of flaw can enable persistent malware installation or botnet enrollment on exposed networking devices.

If patching is not immediately possible, reduce exposure of the management plane and internet-facing services. ASUS specifically recommends disabling all services accessible from the internet on unsupported/EOL devices, including remote access from WAN, port forwarding, DDNS, VPN server, DMZ, port triggering, and FTP. More generally, restrict router administration to trusted internal networks or VPN-only access, disable remote management unless strictly required, review security settings for unnecessary exposure, use strong unique passwords for both Wi-Fi and router administration, avoid password reuse, and monitor device logs and vendor advisories. These measures reduce attack surface but do not fully eliminate risk.

Apply the ASUS security update immediately. For the affected supported models identified in the provided content, ASUS released fixed firmware version 1.1.2.3_1010 for DSL-AC51, DSL-N16, and DSL-AC750. Firmware should be obtained from the relevant ASUS product page or the ASUS support/security advisory portal. For devices that are end-of-life and no longer receive firmware updates, replacement with a supported model is the appropriate remediation.