{"slug":"asus-zenwifi-pro-xt12","display_name":"ZenWIFI Pro XT12","model_name":"ZenWIFI Pro XT12","hardware_revision":"","region_code":"","category":"mesh_node","vendor":{"slug":"asus","name":"ASUS"},"verdict":{"status":"slowing","label":"Slowing down","confidence":"high","reason":"138 days since the last release against a median gap of 79 (1.7x)","algorithm_version":"lifecycle-1","computed_at":"2026-09-30T02:14:47.133808+00:00","thresholds":{"quiet_days":730,"active_max_days":365,"active_multiple":1.5,"slowing_multiple":3.0,"max_gap_dispersion":1.0,"high_confidence_releases":5,"min_releases_for_cadence":3,"never_updated_min_age_days":365}},"measurements":{"release_count":14,"first_release_date":"2021-11-30","last_release_date":"2026-05-15","days_since_last_release":138,"median_gap_days":79.0,"cadence_multiple":1.747,"observed_support":{"days":1627,"is_floor":true,"measured_from":"first_release"},"promise":{"end_date":null,"is_estimated":false,"is_floor":false,"honoured":null,"basis":null},"cve_patch_latency_days":{"median":null,"measurable":false}},"releases":[{"version":"3.0.0.6.102_36698","channel":"stable","claimed_release_date":"2026-05-15","claimed_date_precision":"day","is_vendor_dated":true,"first_observed_at":"2026-08-02T11:15:35.628116+00:00","observation_kind":"live_crawl","withdrawn_at":null,"changelog":"Security Fixes- Enhanced DNS name handling to address a potential memory issue that could occur in rare cases during name format conversion, improving system security and robustness.- Improved safeguards for execution modules to reduce the risk of substitution during certain processes.","disclosure_score":0.35,"mentions_security":true,"cve_ids":[],"download_url":null,"evidence":{"id":203793,"source_url":"https://www.asus.com/networking-iot-servers/whole-home-mesh-systems/asus-zenwifi/asus-zenwifi-pro-xt12/helpdesk_bios?model2Name=ASUS-ZenWiFi-Pro-XT12","fetched_at":"2026-09-29T03:11:49.987490+00:00","observed_at":"2026-09-29T03:11:49.987490+00:00","http_status":200,"content_sha256":"ff3d760a92bbcf066135ace73141226ea3f16b7ced64085d46a925476ae253fd","html":"//firmwarewatch.cc/evidence/203793","raw":"//firmwarewatch.cc/evidence/203793/raw"}},{"version":"3.0.0.6.102_36697","channel":"stable","claimed_release_date":"2026-03-12","claimed_date_precision":"day","is_vendor_dated":true,"first_observed_at":"2026-08-02T11:15:35.628116+00:00","observation_kind":"live_crawl","withdrawn_at":null,"changelog":"Improvements:Optimized Wi-Fi roaming stability for devices supporting 802.11k but not allowing 11v.Improved Wi-Fi roaming compatibility and stability for iOS 26 devices.Refined accessibility-related UI and interaction details.Improved overall remote connection stability.Improved system behavior when using System diagnostic on feedback page.Bug Fixes:Fixed incorrect connection status display for certain Wi-Fi devices.Fixed AiMesh nodes not displayed correctly in the device list.Fixed a disconnection issue that occurred after enabling the MAC Filter.Security Enhancements:Strengthened input sanitization mechanism.Enhanced system API validation for stronger protection consistency.Strengthened command handling and system resource access controls.Improved system logging and security event recording mechanisms.","disclosure_score":0.42,"mentions_security":true,"cve_ids":[],"download_url":null,"evidence":{"id":203793,"source_url":"https://www.asus.com/networking-iot-servers/whole-home-mesh-systems/asus-zenwifi/asus-zenwifi-pro-xt12/helpdesk_bios?model2Name=ASUS-ZenWiFi-Pro-XT12","fetched_at":"2026-09-29T03:11:49.987490+00:00","observed_at":"2026-09-29T03:11:49.987490+00:00","http_status":200,"content_sha256":"ff3d760a92bbcf066135ace73141226ea3f16b7ced64085d46a925476ae253fd","html":"//firmwarewatch.cc/evidence/203793","raw":"//firmwarewatch.cc/evidence/203793/raw"}},{"version":"3.0.0.6.102_36637","channel":"stable","claimed_release_date":"2025-10-23","claimed_date_precision":"day","is_vendor_dated":true,"first_observed_at":"2026-08-02T11:15:35.628116+00:00","observation_kind":"live_crawl","withdrawn_at":null,"changelog":"- Enhanced system stability.- Enhanced input validation and refactored legacy string handling routines to ensure robust memory management.- Implemented comprehensive validation and expanded command filtering in the web history API.- Strengthened input validation and directory handling in the VPN configuration upload interface.- Fixed an issue that allowed certain user settings to be bypassed, improving overall user control and protection.","disclosure_score":0.37,"mentions_security":false,"cve_ids":[],"download_url":null,"evidence":{"id":203793,"source_url":"https://www.asus.com/networking-iot-servers/whole-home-mesh-systems/asus-zenwifi/asus-zenwifi-pro-xt12/helpdesk_bios?model2Name=ASUS-ZenWiFi-Pro-XT12","fetched_at":"2026-09-29T03:11:49.987490+00:00","observed_at":"2026-09-29T03:11:49.987490+00:00","http_status":200,"content_sha256":"ff3d760a92bbcf066135ace73141226ea3f16b7ced64085d46a925476ae253fd","html":"//firmwarewatch.cc/evidence/203793","raw":"//firmwarewatch.cc/evidence/203793/raw"}},{"version":"3.0.0.6.102_35254","channel":"stable","claimed_release_date":"2025-08-26","claimed_date_precision":"day","is_vendor_dated":true,"first_observed_at":"2026-08-02T11:15:35.628116+00:00","observation_kind":"live_crawl","withdrawn_at":null,"changelog":"Important: After installing this firmware, we strongly recommend performing a factory-default reset to activate every new security adjustment.Security Enhancements- Password Policy Upgrade – Minimum of 10 characters, including at least one letter, one digit, and one special character; disallows consecutive identical characters; hardens defense against brute-force attacks.- HTTPS on 8443 – Management interface now served over TLS by default.- UPnP Disabled – Universal Plug and Play starts in the off state for reduced surface exposure.- Authentication Logic Refactor – Removed redundant code paths for a lean sign-in flow.- Memory Safety Guard (CWE-476) – Introduced null-reference protections across critical services.- Enhanced IPsec Parameter Validation – The existing input checks have been hardened.- Data Exposure Mitigation (CWE-200) – Reinforced controls on sensitive pathways.- Detailed Audit Trails – Expanded logging within the authentication module.System Improvements- Connection Stability – Core algorithms refined for steadier links.- Scheduling Accuracy – Timed tasks execute reliably under PPPoE, PPTP and L2TP WAN modes.- Client List Maintenance – Resolved an issue that prevented offline devices from being removed from the client list","disclosure_score":0.45,"mentions_security":true,"cve_ids":[],"download_url":null,"evidence":{"id":203793,"source_url":"https://www.asus.com/networking-iot-servers/whole-home-mesh-systems/asus-zenwifi/asus-zenwifi-pro-xt12/helpdesk_bios?model2Name=ASUS-ZenWiFi-Pro-XT12","fetched_at":"2026-09-29T03:11:49.987490+00:00","observed_at":"2026-09-29T03:11:49.987490+00:00","http_status":200,"content_sha256":"ff3d760a92bbcf066135ace73141226ea3f16b7ced64085d46a925476ae253fd","html":"//firmwarewatch.cc/evidence/203793","raw":"//firmwarewatch.cc/evidence/203793/raw"}},{"version":"3.0.0.6.102_35213","channel":"stable","claimed_release_date":"2025-03-26","claimed_date_precision":"day","is_vendor_dated":true,"first_observed_at":"2026-08-02T11:15:35.628116+00:00","observation_kind":"live_crawl","withdrawn_at":null,"changelog":"1. Fixed the UI issue in Chrome.2. Fixed client binding issues in Mesh scenarios.3. Enhanced input parameter handling techniques to improve data processing stability and system security.4. Enhance system access control mechanisms.","disclosure_score":0.49,"mentions_security":true,"cve_ids":[],"download_url":null,"evidence":{"id":203793,"source_url":"https://www.asus.com/networking-iot-servers/whole-home-mesh-systems/asus-zenwifi/asus-zenwifi-pro-xt12/helpdesk_bios?model2Name=ASUS-ZenWiFi-Pro-XT12","fetched_at":"2026-09-29T03:11:49.987490+00:00","observed_at":"2026-09-29T03:11:49.987490+00:00","http_status":200,"content_sha256":"ff3d760a92bbcf066135ace73141226ea3f16b7ced64085d46a925476ae253fd","html":"//firmwarewatch.cc/evidence/203793","raw":"//firmwarewatch.cc/evidence/203793/raw"}},{"version":"3.0.0.6.102_35199","channel":"stable","claimed_release_date":"2024-11-13","claimed_date_precision":"day","is_vendor_dated":true,"first_observed_at":"2026-08-02T11:15:35.628116+00:00","observation_kind":"live_crawl","withdrawn_at":null,"changelog":"1. Strengthened input validation and data processing workflows to further protect information security.2. Enhanced AiCloud password protection mechanisms, safeguarding against unauthorized access attempts.3. Enhanced device security through improved buffer handling in connection features.4. Refined data handling processes, ensuring secure and accurate information management.5. Enhanced file access control mechanisms, promoting a more secure operating environment.6. Strengthened certificate protection, providing enhanced data security.","disclosure_score":0.58,"mentions_security":true,"cve_ids":[],"download_url":null,"evidence":{"id":203793,"source_url":"https://www.asus.com/networking-iot-servers/whole-home-mesh-systems/asus-zenwifi/asus-zenwifi-pro-xt12/helpdesk_bios?model2Name=ASUS-ZenWiFi-Pro-XT12","fetched_at":"2026-09-29T03:11:49.987490+00:00","observed_at":"2026-09-29T03:11:49.987490+00:00","http_status":200,"content_sha256":"ff3d760a92bbcf066135ace73141226ea3f16b7ced64085d46a925476ae253fd","html":"//firmwarewatch.cc/evidence/203793","raw":"//firmwarewatch.cc/evidence/203793/raw"}},{"version":"3.0.0.4.388_24177","channel":"stable","claimed_release_date":"2023-11-01","claimed_date_precision":"day","is_vendor_dated":true,"first_observed_at":"2026-08-02T11:15:35.628116+00:00","observation_kind":"live_crawl","withdrawn_at":null,"changelog":"New features:-Built-in Surfshark in VPN Fusion allows you to surf the internet anonymously and securely from anywhere by encrypting connections. Please refer to https://asus.click/SurfsharkVPN-DDNS transfer allows you to transfer your ASUS DDNS hostname from your original router to the new one. Please refer to https://asus.click/ASUSDDNSBug fixes and functionality modifications:-Resolved the issue with login and password changes.-Resolved the IPSec VPN connection issues.-Resolved the Instant Guard connection issues.-Fixed the issue where Traffic Analyzer sometimes couldn't record data.-Fixed the time display issue for the preferred upgrade time in the Auto Firmware Upgrade function.-Fine-tuned the description for port status.-Enabled DynDNS and No-IP DDNS to use IPv6.-Fixed AiMesh preferred AP identification in site survey results.-Updated timezone list for Greenland, Mexico, and Iran.-Allowed WireGuard Server clients to access the Samba server.-Fixed memory leak issue.-The ARP response issue has been resolved, along with the connection issue between the router and the ROG Phone 6 and 7.-Resolved the issue where the USB path is not displayed on the Media Server page in the AiMesh node-Ensured consistent display of client status on the WireGuard server.-Enhanced system stability when accessing the WireGuard Server with DMZ enabled.-Improved stability when enabling or disabling the WireGuard server.-Addressed an issue that prevented clients from accessing the network when setting up the OpenVPN server in TAP mode.-Optimized memory utilization and fixed an occasional server error when registering DDNS with an app.-Corrected a bug encountered when adding a rule to the Network Services Filter.Security updates:-Enabled and supported ECDSA certificates for Let's Encrypt.-Fixed DoS vulnerabilities in firewall configuration pages. -Fixed DoS vulerabilities in httpd. -Fixed information disclosure vulnerability. -Fixed null pointer dereference vulnerabilities. -Fixed token authentication security issues.-Fixed security issues on the status page.-Fixed Client DOM Stored XSS.-Upgraded to the latest dropbear version.-Fixed a stack overflow vulnerability.","disclosure_score":0.55,"mentions_security":true,"cve_ids":[],"download_url":null,"evidence":{"id":203793,"source_url":"https://www.asus.com/networking-iot-servers/whole-home-mesh-systems/asus-zenwifi/asus-zenwifi-pro-xt12/helpdesk_bios?model2Name=ASUS-ZenWiFi-Pro-XT12","fetched_at":"2026-09-29T03:11:49.987490+00:00","observed_at":"2026-09-29T03:11:49.987490+00:00","http_status":200,"content_sha256":"ff3d760a92bbcf066135ace73141226ea3f16b7ced64085d46a925476ae253fd","html":"//firmwarewatch.cc/evidence/203793","raw":"//firmwarewatch.cc/evidence/203793/raw"}},{"version":"3.0.0.4.388.21678","channel":"stable","claimed_release_date":"2022-11-21","claimed_date_precision":"day","is_vendor_dated":true,"first_observed_at":"2026-08-02T11:15:35.628116+00:00","observation_kind":"live_crawl","withdrawn_at":null,"changelog":"1. Optimized memory usage and improved system stability.2. Fixed 2.5G port compatibility issues.3. Added a new web GUI login URL http://www.asusrouter.com4. Fixed IPTV compatibility issue with Movistar. Thanks to Sergio de Luz from RedesZone.net for report and help us to fix it.5. Fixed VPN fusion, AiMesh, and Network map GUI bugs.6. Fixed WAN compatibility issue with Starlink router.7. Fixed miniupnpc vulnerabilities, CVE-2015-603, CVE-2017-10004948. Fixed IPSec server vulnerability, CVE-2022-40617","disclosure_score":0.91,"mentions_security":true,"cve_ids":["CVE-2022-40617"],"download_url":null,"evidence":{"id":203793,"source_url":"https://www.asus.com/networking-iot-servers/whole-home-mesh-systems/asus-zenwifi/asus-zenwifi-pro-xt12/helpdesk_bios?model2Name=ASUS-ZenWiFi-Pro-XT12","fetched_at":"2026-09-29T03:11:49.987490+00:00","observed_at":"2026-09-29T03:11:49.987490+00:00","http_status":200,"content_sha256":"ff3d760a92bbcf066135ace73141226ea3f16b7ced64085d46a925476ae253fd","html":"//firmwarewatch.cc/evidence/203793","raw":"//firmwarewatch.cc/evidence/203793/raw"}},{"version":"3.0.0.4.388.21293","channel":"stable","claimed_release_date":"2022-10-24","claimed_date_precision":"day","is_vendor_dated":true,"first_observed_at":"2026-08-02T11:15:35.628116+00:00","observation_kind":"live_crawl","withdrawn_at":null,"changelog":"Try more on ASUSWRT 2022 with new features at https://asus.click/ASUSWRT20221. Supported WireGuard VPN server and client.2. Supported VPN fusion. It can easily achieve VPN connection to network devices like Smart TV, Game consoles and without installing the VPN client software.3. Supported new devices connection notification.4. Supported connection diagnostic on the ASUS router app.5. Supported Instant Guard 2.0 which helps easily invite family or friends to join the VPN connection.6. Upgraded parental control and added reward, new scheduler for flexible setting7. Fixed HTTP response splitting vulnerability. Thanks to Efstratios Chatzoglou, University of the Aegean.8. Fixed status page HTML vulnerability. Thanks to David Ward.9. Fixed CVE-2018-1160. Thanks to Steven Sroba.10. Fixed cfg_server security issue.","disclosure_score":0.99,"mentions_security":true,"cve_ids":["CVE-2018-1160"],"download_url":null,"evidence":{"id":203793,"source_url":"https://www.asus.com/networking-iot-servers/whole-home-mesh-systems/asus-zenwifi/asus-zenwifi-pro-xt12/helpdesk_bios?model2Name=ASUS-ZenWiFi-Pro-XT12","fetched_at":"2026-09-29T03:11:49.987490+00:00","observed_at":"2026-09-29T03:11:49.987490+00:00","http_status":200,"content_sha256":"ff3d760a92bbcf066135ace73141226ea3f16b7ced64085d46a925476ae253fd","html":"//firmwarewatch.cc/evidence/203793","raw":"//firmwarewatch.cc/evidence/203793/raw"}},{"version":"3.0.0.4.386.50350","channel":"stable","claimed_release_date":"2022-10-05","claimed_date_precision":"day","is_vendor_dated":true,"first_observed_at":"2026-08-02T11:15:35.628116+00:00","observation_kind":"live_crawl","withdrawn_at":null,"changelog":"1. Fixed AiProtection, AiMesh and GUI bugs2. Improved system stability3. Fixed HTTP response splitting vulnerability. Thanks to Efstratios Chatzoglou, University of the Aegean.4. Fixed status page HTML vulnerability. Thanks to David Ward.5. Fixed CVE-2018-1160. Thanks to Steven Sroba.6. Fixed cfg_server security issue.","disclosure_score":0.9,"mentions_security":true,"cve_ids":["CVE-2018-1160"],"download_url":null,"evidence":{"id":203793,"source_url":"https://www.asus.com/networking-iot-servers/whole-home-mesh-systems/asus-zenwifi/asus-zenwifi-pro-xt12/helpdesk_bios?model2Name=ASUS-ZenWiFi-Pro-XT12","fetched_at":"2026-09-29T03:11:49.987490+00:00","observed_at":"2026-09-29T03:11:49.987490+00:00","http_status":200,"content_sha256":"ff3d760a92bbcf066135ace73141226ea3f16b7ced64085d46a925476ae253fd","html":"//firmwarewatch.cc/evidence/203793","raw":"//firmwarewatch.cc/evidence/203793/raw"}},{"version":"3.0.0.4.386.49723","channel":"stable","claimed_release_date":"2022-08-04","claimed_date_precision":"day","is_vendor_dated":true,"first_observed_at":"2026-08-02T11:15:35.628116+00:00","observation_kind":"live_crawl","withdrawn_at":null,"changelog":"1. Supported U-NII-4 5.9GHz channels(US only) for reducing interference and improving connection speed. 2. Fixed AiMesh backhaul issue.3. Fixed Wake-on-LAN issue.4. Improved system stability.","disclosure_score":0.48,"mentions_security":false,"cve_ids":[],"download_url":null,"evidence":{"id":203793,"source_url":"https://www.asus.com/networking-iot-servers/whole-home-mesh-systems/asus-zenwifi/asus-zenwifi-pro-xt12/helpdesk_bios?model2Name=ASUS-ZenWiFi-Pro-XT12","fetched_at":"2026-09-29T03:11:49.987490+00:00","observed_at":"2026-09-29T03:11:49.987490+00:00","http_status":200,"content_sha256":"ff3d760a92bbcf066135ace73141226ea3f16b7ced64085d46a925476ae253fd","html":"//firmwarewatch.cc/evidence/203793","raw":"//firmwarewatch.cc/evidence/203793/raw"}},{"version":"3.0.0.4.386.48823","channel":"stable","claimed_release_date":"2022-05-17","claimed_date_precision":"day","is_vendor_dated":true,"first_observed_at":"2026-08-02T11:15:35.628116+00:00","observation_kind":"live_crawl","withdrawn_at":null,"changelog":"1. Improved Wi-Fi performance.2. Improved system stability.3. Fixed CVE-2022-26376","disclosure_score":0.6,"mentions_security":true,"cve_ids":["CVE-2022-26376"],"download_url":null,"evidence":{"id":203793,"source_url":"https://www.asus.com/networking-iot-servers/whole-home-mesh-systems/asus-zenwifi/asus-zenwifi-pro-xt12/helpdesk_bios?model2Name=ASUS-ZenWiFi-Pro-XT12","fetched_at":"2026-09-29T03:11:49.987490+00:00","observed_at":"2026-09-29T03:11:49.987490+00:00","http_status":200,"content_sha256":"ff3d760a92bbcf066135ace73141226ea3f16b7ced64085d46a925476ae253fd","html":"//firmwarewatch.cc/evidence/203793","raw":"//firmwarewatch.cc/evidence/203793/raw"}},{"version":"3.0.0.4.386.48174","channel":"stable","claimed_release_date":"2022-03-21","claimed_date_precision":"day","is_vendor_dated":true,"first_observed_at":"2026-08-02T11:15:35.628116+00:00","observation_kind":"live_crawl","withdrawn_at":null,"changelog":"1. Fixed AiProtection bugs 2. Fixed IPSec VPN connection issues 3. Fixed Ethernet backhaul connection issues 4. 160MHz throughput optimization 5. Improved system stability","disclosure_score":0.43,"mentions_security":false,"cve_ids":[],"download_url":null,"evidence":{"id":203793,"source_url":"https://www.asus.com/networking-iot-servers/whole-home-mesh-systems/asus-zenwifi/asus-zenwifi-pro-xt12/helpdesk_bios?model2Name=ASUS-ZenWiFi-Pro-XT12","fetched_at":"2026-09-29T03:11:49.987490+00:00","observed_at":"2026-09-29T03:11:49.987490+00:00","http_status":200,"content_sha256":"ff3d760a92bbcf066135ace73141226ea3f16b7ced64085d46a925476ae253fd","html":"//firmwarewatch.cc/evidence/203793","raw":"//firmwarewatch.cc/evidence/203793/raw"}},{"version":"3.0.0.4.386.46699","channel":"stable","claimed_release_date":"2021-11-30","claimed_date_precision":"day","is_vendor_dated":true,"first_observed_at":"2026-08-02T11:15:35.628116+00:00","observation_kind":"live_crawl","withdrawn_at":null,"changelog":"1. Fixed AiMesh and VPN issues2. Improved system stability and fixed GUI issue","disclosure_score":0.24,"mentions_security":false,"cve_ids":[],"download_url":null,"evidence":{"id":203793,"source_url":"https://www.asus.com/networking-iot-servers/whole-home-mesh-systems/asus-zenwifi/asus-zenwifi-pro-xt12/helpdesk_bios?model2Name=ASUS-ZenWiFi-Pro-XT12","fetched_at":"2026-09-29T03:11:49.987490+00:00","observed_at":"2026-09-29T03:11:49.987490+00:00","http_status":200,"content_sha256":"ff3d760a92bbcf066135ace73141226ea3f16b7ced64085d46a925476ae253fd","html":"//firmwarewatch.cc/evidence/203793","raw":"//firmwarewatch.cc/evidence/203793/raw"}}],"identifiers":[{"kind":"marketing_name","value":"ZenWIFI Pro XT12","normalized":"zenwifi pro xt12"}],"revisions":[],"evidence":{"archived_pages":1,"first_observed_at":"2026-08-02T11:15:35.628116+00:00"},"caveats":["observed_support.days is a lower bound: it runs from the first firmware we saw, because no source here publishes launch dates.","Patch latency is not computable for this product: its changelogs name no CVE ids."],"links":{"html":"//firmwarewatch.cc/devices/asus-zenwifi-pro-xt12","self":"//firmwarewatch.cc/api/v1/products/asus-zenwifi-pro-xt12.json","vendor":"//firmwarewatch.cc/api/v1/vendors/asus.json","feed":"//firmwarewatch.cc/feeds/devices/asus-zenwifi-pro-xt12.xml","methodology":"//firmwarewatch.cc/api/v1/methodology.json"}}