Device Support-Lifespan Observatory

What vendors do, not what they announce.

ASUS

RT-AX89X

End of support well evidenced

the vendor has said support is over

the vendor has declared end of support for this product

Sign in to be emailed when this verdict changes.
Last firmware
31 October 2025 (11 months ago)
Releases seen
15
Update rhythm
about every 4 months
Support observed
≥6 years
Vendor's promise
no support period we can evaluate
Patch latency
not measurable — its changelogs name no CVE ids

Firmware history

  1. 3.0.0.4.388_33812 31 October 2025

    Release notes — disclosure 0.49 
    This model was end of its life, and its firmware, utility, website, and manual will no longer be updated. For more details, please refer to https://www.asus.com/event/network/eol-product/- Enhanced system stability.- Enhanced input validation and refactored legacy string handling routines to ensure robust memory management.- Mitigated security risks in AiCloud service by enforcing strict credential verification, implementing robust file path validation, and hardening command execution logic to prevent unauthorized access and manipulation of system resources.- Implemented comprehensive validation and expanded command filtering in the web history API.- Strengthened input validation and directory handling in the VPN configuration upload interface.- Fixed an issue that allowed certain user settings to be bypassed, improving overall user control and protection.

    Archived page, fetched 29 September 2026

  2. 3.0.0.4.388_33744 5 March 2025

    Release notes — disclosure 0.27 
    Security:1.Enhanced input parameter handling techniques to improve data processing stability and system security.2.Enhance system access control mechanisms.Bug Fixes and Enhancements：1. Enhanced Client Connection Stability.2. Improved AiMesh stability.

    Archived page, fetched 29 September 2026

  3. 3.0.0.4.388_32407 20 October 2023

    Cites CVE-2011-0719, CVE-2012-2812, CVE-2012-2836, CVE-2012-2837, CVE-2012-2841, CVE-2012-3868, CVE-2013-0172, CVE-2013-4124, CVE-2014-3493, CVE-2015-0240, CVE-2015-5252, CVE-2015-5296, CVE-2015-5299, CVE-2015-5370, CVE-2016-10196, CVE-2016-2110, CVE-2016-2111, CVE-2016-2112, CVE-2016-2115, CVE-2016-2118, CVE-2016-4425, CVE-2016-6328, CVE-2018-1160, CVE-2018-13305, CVE-2018-15822, CVE-2018-1999012, CVE-2018-20030, CVE-2018-5743, CVE-2019-17498, CVE-2019-9278, CVE-2020-0093, CVE-2020-0182, CVE-2020-12767, CVE-2020-13112, CVE-2020-13113, CVE-2020-13114, CVE-2020-13904, CVE-2020-14323, CVE-2020-20450, CVE-2020-20451, CVE-2020-20891, CVE-2020-20892, CVE-2020-20896, CVE-2020-20898, CVE-2020-21041, CVE-2020-21688, CVE-2020-21697, CVE-2020-22016, CVE-2020-22017, CVE-2020-22020, CVE-2020-22022, CVE-2020-22023, CVE-2020-22025, CVE-2020-22026, CVE-2020-22027, CVE-2020-22028, CVE-2020-22030, CVE-2020-22031, CVE-2020-22032, CVE-2020-22036, CVE-2020-22038, CVE-2020-22039, CVE-2020-22040, CVE-2020-22041, CVE-2020-22042, CVE-2020-22043, CVE-2020-22044, CVE-2020-22046, CVE-2020-22048, CVE-2020-22049, CVE-2020-22051, CVE-2020-22054, CVE-2020-23906, CVE-2021-38090, CVE-2021-38091, CVE-2021-38092, CVE-2021-38093, CVE-2021-38094, CVE-2021-38114, CVE-2021-38171, CVE-2022-35401

    Release notes — disclosure 0.99 
    Feature:1. Supports wireguard vpn.2. iPhone/Android USB auto backup WAN allows you to connect your phone to the router’s USB port and use it as an internet source. Please refer to https://asus.click/AutobackupWAN3. Built-in Surfshark in VPN Fusion allows you to surf the internet anonymously and securely from anywhere by encrypting connections. Please refer to https://asus.click/SurfsharkVPN4. Supports safe browsing.5. Supports VPN fusion.6. Supports new devices connection notification.7. Supports connection diagnostic on the ASUS router app.8. Supports Instant Guard 2.0 which helps easily invite family or friends to join the VPN connection.9. Supports OCN, v6plus.10. NowTV profile has been added under new IPTV profiles.11. Upgraded parental control and added reward, new scheduler for flexible setting12. Update wireless settings, supports separate settings while smart connect enabled.13. Improve system stability.Security:- Fixed HTTP response splitting vulnerability. Thanks to Efstratios Chatzoglou, University of the Aegean.- Fixed status page HTML vulnerability. Thanks to David Ward.- Fixed CVE-2018-1160. Thanks to Steven Sroba.- Fixed cfg_server security issue.- Fixed CVE-2011-0719, CVE-2012-2812, CVE-2012-2836, CVE-2012-2837, CVE-2012-2841, CVE-2012-3868, CVE-2013-0172, CVE-2013-4124, CVE-2014-3493, CVE-2015-0240, CVE-2015-5252, CVE-2015-5296, CVE-2015-5299, CVE-2015-5370, CVE-2016-2110, CVE-2016-2111, CVE-2016-2112, CVE-2016-2115, CVE-2016-2118, CVE-2016-4425, CVE-2016-6328, CVE-2016-10196, CVE-2018-5743, CVE-2018-13305, CVE-2018-15822, CVE-2018-20030, CVE-2018-1999012, CVE-2019-9278, CVE-2019-17498, CVE-2020-0093, CVE-2020-0182, CVE-2020-12767, CVE-2020-13112, CVE-2020-13113,CVE-2020-13114, CVE-2020-13904,CVE-2020-14323, CVE-2020-20450, CVE-2020-20451, CVE-2020-20891, CVE-2020-20892, CVE-2020-20896, CVE-2020-20898, CVE-2020-21041, CVE-2020-21688, CVE-2020-21697, CVE-2020-22016, CVE-2020-22017, CVE-2020-22020, CVE-2020-22022, CVE-2020-22023, CVE-2020-22025, CVE-2020-22026, CVE-2020-22027, CVE-2020-22028, CVE-2020-22030, CVE-2020-22031, CVE-2020-22032, CVE-2020-22036, CVE-2020-22038, CVE-2020-22039, CVE-2020-22040, CVE-2020-22041, CVE-2020-22042, CVE-2020-22043, CVE-2020-22044, CVE-2020-22046, CVE-2020-22048, CVE-2020-22049, CVE-2020-22051, CVE-2020-22054, CVE-2020-23906, CVE-2022-35401,CVE-2021-38090,CVE-2021-38091, CVE-2021-38092, CVE-2021-38093, CVE-2021-38094, CVE-2021-38114, CVE-2021-38171.

    Archived page, fetched 29 September 2026

  4. 3.0.0.4.386.47468 18 October 2022

    Release notes — disclosure 0.48 
    1. Improved system stability.2. Fixed connection issues with 64 bits WPA key.3. Improved AiMesh stability.4. Improved AiProtection performance.5. Fixed Samba, busybox, httpd related vulnerabilities.6. Upgraded Strongswan to 5.9.6.7. Upgraded OpenVPN to 2.4.12.8. Fixed PPPoE acceleration issues.9. Fixed config file download issue with Firefox.10. Fixed IPv6 related issues.

    Archived page, fetched 29 September 2026

  5. 3.0.0.4.386.47191 25 April 2022

    Release notes — disclosure 0.48 
    1. Fixed AiMesh issues.2. Improve system stability.3. Fixed Guest network related issues.4. Fixed open VPN related issues.5. Fixed DDNS related issues.

    Archived page, fetched 29 September 2026

  6. 3.0.0.4.386.47027 25 January 2022

    Release notes — disclosure 0.62 
    1. Add 10G base-T IPG GUI option. 2. Fixed few wireless compatibility issues.3. Fixed extend NSS not be synchornized to mesh node, and set to be default enabled.4. Fixed open vpn related issues.5. Fixed lets encrypt related issues.6. Fixed AiMesh related issues.7. Fixed minor GUI bugs and strings.8. Update dual wan network monitor machanism.9. Fixed AiCloud related issue.10. Fixed DDNS related issues.Security fixes:1. Fixed authenticated stored Cross Site Scripting.2. Fixed json/plc/port file traversal and stack overflow vulnerability.3. Fixed httpd add line break to the command injection checklist.4. Fixed httpd unauth DoS.5. Fixed arbitrary file reading vulnerability.6. Fixed HTTP smuggling.7. Fixed stack overflow vulnerability.

    Archived page, fetched 29 September 2026

  7. 3.0.0.4.386.45130 18 September 2021

    Release notes — disclosure 0.05 
    GUI bug fixes.

    Archived page, fetched 29 September 2026

  8. 3.0.0.4.386.45120 26 August 2021

    Cites CVE-2015-8041, CVE-2016-2148, CVE-2016-4476, CVE-2016-6301, CVE-2017-13082, CVE-2017-13084, CVE-2017-13086, CVE-2018-1000120, CVE-2019-11555, CVE-2019-5481, CVE-2019-5482, CVE-2019-9494, CVE-2019-9495, CVE-2019-9496, CVE-2019-9497, CVE-2019-9498, CVE-2019-9499, CVE-2020-11810, CVE-2020-14305, CVE-2020-25643, CVE-2020-8169, CVE-2021-27803, CVE-2021-30004

    Release notes — disclosure 1.00 
    1. AiMesh 2.0- System optimization: one click in AiMesh to optimize the topology- System Ethernet backhaul mode, all nodes will only connect by ethernet, all bands will be released for wireless clients.- System factory default and reboot.- Client device reconnect, make the device to offline and online again.- Client device binding to specific AP.- Guest WiFi on all Mesh nodes (all node need to upgrade to 3.0.0.4.386 firmware)- Access nodes USB application.Connection priority and Ethernet backhaul mode introductionhttps://www.asus.com/support/FAQ/1044184How to setup ASUS AiMesh or ZenWiFi Mesh Ethernet backhaul under different conditionshttps://www.asus.com/support/FAQ/1044151/2. New Family interface in ASUS router App.ASUS Router App for iOS must greater or equal to iOS v1.0.0.5.75Android version greater or equal to v1.0.0.5.743. The unit of the WiFi time scheduler goes to 1 minute.4. Support IPSec IKE v1 and IKE v2, and you can use the Windows 10 native VPN client program to connect to the router's IPSec VPN server. The Windows 10 new FAQ is in https://www.asus.com/support/FAQ/10335765. 2.4 and 5G on the network map could be configured in the same tab.6. Captcha for login can be disabled in administration -> system.7. Printer server port can be disabled on the USB app page.8. Clients which connect to the guest network can be viewed in the network map -->view list --> interface9. Fix Let's Encrypt not working properly.10. Add IPTV supports for specific region.This version includes several vulnerability patches.BusyBox- CVE-2016-2148- CVE-2016-6301- CVE-2018- 1000517curl- CVE-2020-8169- CVE-2019-5481- CVE-2019-5482- CVE-2018-1000120- CVE-2018- 1000300- CVE-2018-16839lighttpd- CVE-2018-19052Linux- CVE-2020-14305- CVE-2020-25643- CVE-2019-19052lldpd- CVE-2020-27827Avahi- CVE-2017-6519hostapd- CVE-2021-30004- CVE-2019-16275OpenVPN- CVE-2020-11810- CVE-2020-15078wpa- CVE-2021-30004- CVE-2021-27803- CVE-2019-11555- CVE-2019-9499- CVE-2019-9498- CVE-2019-9497- CVE-2019-9496- CVE-2019-9495- CVE-2019-9494- CVE-2017-13086- CVE-2017-13084- CVE-2017-13082- CVE-2016-4476- CVE-2015-8041

    Archived page, fetched 29 September 2026

  9. 3.0.0.4.386.23012 4 March 2021

    Cites CVE-2020-25681, CVE-2020-25682, CVE-2020-25683, CVE-2020-25684, CVE-2020-25685, CVE-2020-25686, CVE-2020-25687

    Release notes — disclosure 0.67 
    - Improved system stability.- Fixed GUI bugs.- Security Fixed: CVE-2020-25681, CVE-2020-25682, CVE-2020-25683, CVE-2020-25687, CVE-2020-25684, CVE-2020-25685, CVE-2020-25686

    Archived page, fetched 29 September 2026

  10. 3.0.0.4.386.22790 3 November 2020

    Release notes — disclosure 0.31 
    - Fix AiMesh setup issue.- Improve system stability.- Supports WPA3.

    Archived page, fetched 29 September 2026

  11. 3.0.0.4.384.82800 9 July 2020

    Release notes — disclosure 0.32 
    - Improved system stability.- Now support 10G RJ45 and 1G RJ45 WAN aggregation

    Archived page, fetched 29 September 2026

  12. 3.0.0.4.384.81444 4 May 2020

    Release notes — disclosure 0.34 
    - Add Game page & Open NAT - Fix LED issues - Add smart connect - Fix AiMesh backhaul disconnect issue - Fix 160MHz unstable issue - Update OFDMA GUI

    Archived page, fetched 29 September 2026

  13. 3.0.0.4.384.81377 18 February 2020

    Release notes — disclosure 0.05 
    - Stability Improvements

    Archived page, fetched 29 September 2026

  14. 3.0.0.4.384.81361 26 December 2019

    Release notes — disclosure 0.32 
    - Improve WiFi compatibility for smartphone.- Improve 160MHz compatibility for AC9260, AC9560- GUI bug fixes and string update.

    Archived page, fetched 29 September 2026

  15. 3.0.0.4.384.81324 11 November 2019

    Release notes — disclosure 0.06 
    - Improve WiFi compatibility- Performance improvement

    Archived page, fetched 29 September 2026

Evidence

3 archived pages sit behind this record, the earliest read on 2 August 2026. Everything above was read from them, and each is kept byte for byte so it can be checked after the vendor edits the original.

Identifiers: marketing_name RT-AX89X · openwrt_id asus_rt-ax89x

Judged by lifecycle-1 on 29 September 2026. How these verdicts are computed.

Machine-readable: JSON · RSS