Device Support-Lifespan Observatory

What vendors do, not what they announce.

ASUS

RT-AX3000S

Actively updated well evidenced

firmware is arriving about as often as it always has

12 days since the last release against a median gap of 96 (0.1x)

Sign in to be emailed when this verdict changes.
Last firmware
18 September 2026 (12 days ago)
Releases seen
7
Update rhythm
about every 3 months
Support observed
≥2 years
Vendor's promise
no support period we can evaluate
Patch latency
not measurable — its changelogs name no CVE ids

Firmware history

  1. 3.0.0.4.388_34020 18 September 2026

    Release notes — disclosure 0.32 
    Improve system stability.We recommend upgrading to this version to maintain optimal protection.

    Archived page, fetched 29 September 2026

  2. 3.0.0.4.388_34017 19 May 2026

    Release notes — disclosure 0.35 
    Security Fixes- Enhanced DNS name handling to address a potential memory issue that could occur in rare cases during name format conversion, improving system security and robustness.- Improved safeguards for execution modules to reduce the risk of substitution during certain processes.

    Archived page, fetched 22 September 2026

  3. 3.0.0.4.388_34015 24 March 2026

    Release notes — disclosure 0.37 
    Security Fixes- Enhanced input validation and protection to reduce the risk of command injection and SQL injection.- Hardened environment variable handling.- Hardened protections around specific logging/command composition flows to reduce potential injection risks.- Patched a command injection risk in a specific network diagnostic function.We recommend upgrading to this version to maintain best protection.

    Archived page, fetched 22 September 2026

  4. 3.0.0.4.388_33965 20 October 2025

    Release notes — disclosure 0.45 
    - Enhanced system stability.- Enhanced input validation and refactored legacy string handling routines to ensure robust memory management.- Implemented comprehensive validation and expanded command filtering in the web history API.- Strengthened input validation and directory handling in the VPN configuration upload interface.- Fixed an issue that allowed certain user settings to be bypassed, improving overall user control and protection.- Password Policy Upgrade – Minimum of 10 characters, including at least one letter, one digit, and one special character; disallows consecutive identical characters; hardens defense against brute-force attacks.- HTTPS on 8443 – Management interface now served over TLS by default.- UPnP Disabled – Universal Plug and Play starts in the off state for reduced surface exposure.- Authentication Logic Refactor – Removed redundant code paths for a lean sign-in flow.- Memory Safety Guard (CWE-476) – Introduced null-reference protections across critical services.- Enhanced IPsec Parameter Validation – The existing input checks have been hardened.- Data Exposure Mitigation (CWE-200) – Reinforced controls on sensitive pathways.- Detailed Audit Trails – Expanded logging within the authentication module.

    Archived page, fetched 22 September 2026

  5. 3.0.0.4.388_33911 24 April 2025

    Release notes — disclosure 0.31 
    Fixed the IPTV compatibility issue for Now TV

    Archived page, fetched 22 September 2026

  6. 3.0.0.4.388_33903 25 March 2025

    Release notes — disclosure 0.49 
    1. Fixed the UI issue in Chrome.2. Fixed client binding issues in Mesh scenarios.3. Enhanced input parameter handling techniques to improve data processing stability and system security.4. Enhance system access control mechanisms.

    Archived page, fetched 22 September 2026

  7. 3.0.0.4.388_33625 14 January 2025

    Release notes — disclosure 0.58 
    1. Strengthened input validation and data processing workflows to further protect information security.2. Enhanced AiCloud password protection mechanisms, safeguarding against unauthorized access attempts.3. Enhanced device security through improved buffer handling in connection features.4. Refined data handling processes, ensuring secure and accurate information management.5. Enhanced file access control mechanisms, promoting a more secure operating environment.6. Strengthened certificate protection, providing enhanced data security.

    Archived page, fetched 22 September 2026

Evidence

2 archived pages sit behind this record, the earliest read on 2 August 2026. Everything above was read from them, and each is kept byte for byte so it can be checked after the vendor edits the original.

Identifiers: marketing_name RT-AX3000S

Judged by lifecycle-1 on 30 September 2026. How these verdicts are computed.

Machine-readable: JSON · RSS