| ASUS RT-AC86U (RT-AC86U)
|
|
Security Grade
Calculator v1
|
RT-AC86U AC2900 Dual Band Gigabit WiFi Router
Category: Wireless Router • Model / Gen: RT-AC86U; firmware-specific assessment RT-AC86U
Release Date: 2017-09-18 • Status:
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Rare
|
🔗 Proof
|
Provisional rating: physical USB/reset/network access exists; no certified tamper resistance or incident prevalence was established.
|
| Known vulnerabilities
|
Rare
|
🔗 Proof
|
CVE-2023-39239 affects firmware listed as 3.0.0.4_386_51529. Administrator privileges are required; a format-string flaw can permit code execution or disruption. Fixed: 3.0.0.4.386_51915. Do not apply obsolete unauthenticated CVSS descriptions.
|
| Prior attacks
|
None
|
🔗 Proof
|
No confirmed RT-AC86U in-the-wild incident was established by this reviewed advisory. None is provisional evidence status, not proof of no attacks.
|
| Updatability
|
Rare
|
🔗 Proof
|
Historical firmware fixes are documented. Rare is a conservative qualitative assessment; present support duration and update cadence were not independently established.
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Partial
|
🔗 Proof
|
WPA/WPA2-Enterprise, RADIUS-client and SSH support provide interface-specific authentication. Partial reflects unverified coverage across all interfaces.
|
| Communications
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
WPA2 and SSH provide protected communication when configured appropriately. This score is scoped to those modes; WPA legacy modes and every management path are not assumed equally secure.
|
| Storage
|
No encryption
|
🔗 Proof
|
Provisional conservative selection: encryption of onboard flash and attached storage was not established. No encryption is an assessment assumption, not a verified absence claim.
|
| Category Score
|
Score: 2 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Basic
|
🔗 Proof
|
Guest network and shared-folder permission functions are documented. Basic does not claim a comprehensive multi-administrator role model.
|
| Authentication
|
Basic
|
🔗 Proof
|
Local administrator password authentication is available. MFA and password-storage implementation were not established for this exact firmware scope.
|
| Brute-force protection
|
Basic
|
🔗 Proof
|
Basic is a provisional ecosystem-based judgment; exact administrator lockout behavior and firmware-specific rate limits were not independently tested.
|
| Event logging
|
Partial logging
|
🔗 Proof
|
System Log is documented. Partial does not imply complete administrator security-event recording or tamper-proof retention.
|
| Passwords
|
Require change after setup
|
🔗 Proof
|
Initial administrator credential setup and later password management support this provisional setup category. Mandatory complexity and forced periodic rotation were not established.
|
| Category Score
|
Score: 2 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
(Companion App: )
|
| Hardware (CPU / GPU)
|
CPU: • GPU:
|
| Memory & Storage
|
Memory: • Storage:
|
| Power, Battery & Charging
|
Battery: • Power: • Charging:
|
| Display & Camera
|
Display: • Camera:
|
| Sound & Connectivity
|
Sound: • Connectivity:
|
| Physical (Dimensions & Mass)
|
Dimensions: • Mass:
|
Desk-based assessment dated 2026-10-25; no hands-on testing. This is RT-AC86U, not RT-AX56U V2. CVE information is historical and firmware-specific; use the current exact-model firmware.
Release date 2017-09-18 means the regional ASUS product-announcement date carried by the publisher; worldwide first availability is not established. Unknown properties are marked provisional because the form lacks Unknown.
References:
