ASUS RT-AX55
From Wiki-IoT
Revision as of 02:45, 24 October 2026 by JiangHan (talk | contribs) (set device_known_hardware_tampering noproof)
Security Evaluation
1. Device Security
2. System Security
3. User Authentication
Technical Specifications
Assessment reviewed 2026-10-22. Documented capability assessment with explicitly labelled assessor inferences; no individual installed device was tested.
Assessment scope
Stock RT-AX55. Latest release visible in the reviewed model page: 3.0.0.4.386_53370, 2026-09-04. No physical device or installed configuration was inspected.
The rubric has no numerical frequency thresholds. Qualitative mappings are explained in each comment; an inferred risk rating is not a measured incident rate. Configuration benefits apply only when the specified controls are enabled.
The date is the scheduled Japan retail release announced by ASUS Japan, 22 January 2021, not a worldwide first-launch claim. ASUS Japan launch announcement
Calculation cross-check
Device CRIS [2, 3, 2, 1], CATS 2. System CRIS [2, 1, 3], CATS 2. User CRIS [2, 2, 2, 2, 2], CATS 2. GRAS 6; expected grade B. Methodology
Evidence and inference notes
- Known hardware tampering: ASSESSOR INFERENCE: Rare denotes a local-access barrier. Reset, power and Ethernet controls permit configuration changes or service interruption by a physically present person; no tamper-proof certification or measured incident frequency is claimed. RT-AX55 user guide E21014 ASUS setup and reset FAQ
- Known vulnerabilities: ASSESSOR INFERENCE: Very common reflects recurring independent published management weaknesses and command injection, not measured prevalence. Historical affected firmware and patched current releases are distinguished below. ASUS security advisories GreyNoise original RT-AX55 research Current TWCERT/CC CVE-2023-39238 notice
- Prior attacks: ASSESSOR INFERENCE: Rare represents the verified ASUS campaign relevant to this model. GreyNoise observed real compromised ASUS routers and reproduced the related path on RT-AX55 3.0.0.4.386.51598. Its fleet total is not an RT-AX55 infection count. GreyNoise ASUS campaign GreyNoise original RT-AX55 research
- Updatability: Several official firmware releases were published during 2026. RT-AX55 firmware
- Authentication with other systems: Partial describes the service set: administration requires credentials, while DHCP/DNS and network discovery do not universally authenticate peers. This does not claim mutual authentication for every attached system. RT-AX55 user guide E21014
- Communications: Conditional management/Wi-Fi scope: use HTTPS-only administration and WPA3-Personal or WPA2-AES; disable Telnet and plaintext remote administration. These supported settings justify the protected-channel rating. HTTP mode, legacy Wi-Fi and discovery traffic are excluded; this is not an inspected installation. RT-AX55 specifications RT-AX55 user guide E21014
- Storage: ASSESSOR INFERENCE, firmware-code flash scope: published stock RT-AX55 firmware research extracts an ordinary filesystem and analyses executable/NVRAM use. No encryption is a limited firmware-code assessment, not proof that every credential is plaintext. The directly analysed historical build is 3.0.0.4.386.51598. Original RT-AX55 stock firmware analysis GreyNoise original RT-AX55 research
- Account management: An administrator credential is documented; full local role management was not demonstrated. RT-AX55 user guide E21014
- Authentication: Local management uses username/password; local MFA was not established. RT-AX55 user guide E21014
- Brute-force protection: ASSESSOR INFERENCE: Basic denotes the configurable login CAPTCHA, which impedes automated guessing. The control is documented; no universal model/build-specific attempt count or lockout duration is claimed. ASUS login CAPTCHA control RT-AX55 firmware
- Event logging: System Log records network activity; exhaustive administrator-access auditing is not established. RT-AX55 user guide E21014
- Passwords: Setup creates a router login/password. Firmware 3.0.0.4.386_53244 introduced a ten-character minimum, recommending reset to apply it. This maps to the setup-password bucket; length alone does not prove enforced mixed-character complexity. RT-AX55 quick setup guide RT-AX55 firmware
Historical vulnerabilities and remediation
CVE-2023-39780: Authenticated command injection
- Affected scope: RT-AX55 3.0.0.4.386.51598 explicitly documented by original researchers; wider range unverified.
- Preconditions: Reachable management service and an authenticated session; initial-access flaws are separate.
- Impact: System commands and persistent unauthorized configuration.
- Remediation: Vendor fixes reported; first fully fixed build across related paths not established here. Use current official firmware; existing backdoor settings require separate review.
- Severity: Numeric score not independently verified; omitted.
CVE-2023-39238: Authenticated format-string flaw
- Affected scope: Current TWCERT/CC notice lists RT-AX55 3.0.0.4.386_50460. Do not infer all earlier builds.
- Preconditions: Remote attacker with administrator privileges, current CNA notice.
- Impact: Code execution or service disruption.
- Remediation: RT-AX55 3.0.0.4.386_51948.
- Severity: CVSS 3.1: 7.2; AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, current TWCERT/CC.
