Device Support-Lifespan Observatory

What vendors do, not what they announce.

ASUS

RT-N12 D1

End of support well evidenced

the vendor has said support is over

the vendor has declared end of support for this product

Sign in to be emailed when this verdict changes.
Last firmware
18 April 2025 (1 year ago)
Releases seen
11
Update rhythm
about every 7 months
Support observed
≥12 years
Vendor's promise
no support period we can evaluate
Patch latency
not measurable — its changelogs name no CVE ids

Firmware history

  1. 3.0.0.4.380_8293 18 April 2025

    Release notes — disclosure 0.51 
    This model was end of its life, and its firmware, utility, website, and manual will no longer be updated. For more details, please refer to https://www.asus.com/event/network/eol-product/1. Enhanced input parameter handling techniques to improve data processing stability and system security.2. Enhance system access control mechanisms.

    Archived page, fetched 29 September 2026

  2. 3.0.0.4.380.8292 16 March 2020

    Cites CVE-2019-15126

    Release notes — disclosure 0.66 
    - Fixed CVE-2019-15126 (Kr00k) vulnerability.

    Archived page, fetched 29 September 2026

  3. 3.0.0.4.380.8291 5 June 2018

    Cites CVE-2018-8877, CVE-2018-8878, CVE-2018-8879

    Release notes — disclosure 0.61 
    - Improved system stability.- Fixed XSS vulnerability. Thanks to Yonghui Han of Fortinet's FortiGuard Labs.- Fixed CVE-2018-8877, CVE-2018-8878, CVE-2018-8879- Modified Quick Internet Setup wizard process.

    Archived page, fetched 29 September 2026

  4. 3.0.0.4.380.8228 29 March 2018

    Cites CVE-2017-13704, CVE-2017-14491, CVE-2017-14492, CVE-2017-14493, CVE-2017-14494, CVE-2017-14495, CVE-2017-14496, CVE-2018-5721, CVE-2018-5999, CVE-2018-6000, CVE-2018-8826

    Release notes — disclosure 0.99 
    Release note- Fixed information disclosure vulnerability. Thanks to Haitan Xiang and Fand Wang.- Fixed CVE-2018-5721 Stack-base buffer overflow vulnerability - Fixed CVE-2018-8826 remote code code execution vulnerability. Thanks to Chris Wood.- Fixed CVE-2018-5999 HTTP authorization bypass and CVE-2018-6000. An independent security researcher has reported this vulnerability to Beyond Security’s SecuriTeam Secure Disclosure program-Fixed remote code execution vulnerability. Thanks to David Maciejak of Fortinet's FortiGuard Labs- Fixed CVE-2017-14491: DNS - 2 byte heap based overflow- Fixed CVE-2017-14492: DHCP - heap based overflow- Fixed CVE-2017-14493: DHCP - stack based overflow- Fixed CVE-2017-14494: DHCP - info leak- Fixed CVE-2017-14495: DNS - OOM DoS- Fixed CVE-2017-14496: DNS - DoS Integer underflow- Fixed CVE-2017-13704: Bug collision

    Archived page, fetched 29 September 2026

  5. 3.0.0.4.380.8120 1 November 2017

    Cites CVE-2017-13704, CVE-2017-14491, CVE-2017-14492, CVE-2017-14493, CVE-2017-14494, CVE-2017-14495, CVE-2017-14496

    Release notes — disclosure 0.76 
    Security fixed - Fixed KRACK vulnerability - Fixed CVE-2017-14491: DNS - 2 byte heap based overflow - Fixed CVE-2017-14492: DHCP - heap based overflow - Fixed CVE-2017-14493: DHCP - stack based overflow - Fixed CVE-2017-14494: DHCP - info leak - Fixed CVE-2017-14495: DNS - OOM DoS - Fixed CVE-2017-14496: DNS - DoS Integer underflow - Fixed CVE-2017-13704 : Bug collision - Fixed predictable session tokens, logged user IP validation, Logged-in information disclosure (special thanks for Blazej Adamczyk contribution) - Fixed web GUI authorization vulnerabilities.

    Archived page, fetched 29 September 2026

  6. 3.0.0.4.380.7378 24 April 2017

    Cites CVE-2017-5891, CVE-2017-5892, CVE-2017-6547, CVE-2017-6548, CVE-2017-6549

    Release notes — disclosure 0.69 
    Security fixed - Fixed CVE-2017-5891. - Fixed CVE-2017-5892. - Fixed CVE-2017-6547. - Fixed CVE-2017-6549. - Fixed CVE-2017-6548. - Added log message for brute force attack.Bug fixed - Fixed UI issue when using Chrome 56.

    Archived page, fetched 29 September 2026

  7. 3.0.0.4.380.4180 22 December 2016

    Release notes — disclosure 0.45 
    Security related - Updated OpenSSL library to 1.0.2j to fix security issues. - Updated Dropbear SSH to 2016.74 to fixe security issues. - Fixed a security vulnerability regarding XSS. - Fixed a security vulnerability regarding CSRF. - Added protection for Brute-force attack.Bug fixed - Fixed Chrome, Edge and IE compatibility issues. - Fixed quick internet setting wizard compatibility issues. Modified - Supported Google DDNS support . - Modified the Quick Internet Setting wizard behavior to enhance compatibility.MD5: 79f180c87b6a54a5e0f5be10cdcfbe47

    Archived page, fetched 29 September 2026

  8. 9.0.0.4.380.2928 14 April 2016

    Release notes — disclosure 0.38 
    [Beta release] Security fixes: - Restricted access from wan method to enhance security. - Changed Telnet default access interface.New Features - Support ASUS Router AppBug fixes- Fixed setup wizard IE compatibility issue.- Fixed IPTV GUI issue- Fixed view list in network map cannot be closed.- Fixed network map device icon issue- Fixed client list name cannot be changed issue.- Fixed Reboot Scheduler issue under AP mode

    Archived page, fetched 29 September 2026

  9. 3.0.0.4.378.9479 18 March 2016

    Release notes — disclosure 0.65 
    Security fixes: - Fixed User-Agent buffer overflow. - Fixed null ptr dereference in https issue. - Fixed buffer overflow issues. - Modified brute-force protection mechanism in router login page. New Features - Added Bandwidth Limiter in QoS. Let administrator easily limit specific client's upload/ download bandwidth- Independent mac filter for main wireless network and guest network. Administrator can set white list for main wireless network to only allow trust client connect to main wireless network and share network to guest with guest network- Modified the network map client status. When chick the client icon, administrator can bind IP, change host name, change icon, block internet access or set time scheduling.Modifications - Adjusted Guest network mac filter maximum client number to 16 - Allow paste password on login page to fulfill some password management software requirement.- Show current control channel while value is auto. - Bandwidth limiter can accept decimal point. - Unnecessary to reboot router after set allow only spcified IP address to enter GUI.- Changed warning page style. Bug fixes - Fixed setup wizard IE11 compatibility issue. - Fixed MAC clone abnormal issue - Fixed web redirection issue when WAN IP conflicted. - Fixed compatibility issues for IE8 - Fixed GUI related issues - Fixed login issue when router’s IP is 10.x.x.x - Fixed parental control-> time scheduling related issue. - Fixed IPv6 relay issues.

    Archived page, fetched 29 September 2026

  10. 3.0.0.4.376.3602 7 November 2014

    Release notes — disclosure 0.55 
    Network map new features: - Click the lock icon in client profile to assign fixed IP for client. - Added number on client icon to show how many clients connect to repeater and AP under router - Added the DHCP and static IP identification. Known issue. If the IP is fixed in client side, Network map would show DHCP. Others - Fixed NAT loopback issue. - Fixed the NTP sync issue in AP mode - Fixed multiple user interface issues

    Archived page, fetched 29 September 2026

  11. 3.0.0.4.374.813 27 September 2013

    Release notes — disclosure 0.38 
    If your router firmware version is 2.1.1.1.x, you could upload firmware version 3.0.0.4.374.813 directly.1. Fixed DNS amplification DDoS attack related issues.

    Archived page, fetched 29 September 2026

Evidence

2 archived pages sit behind this record, the earliest read on 2 August 2026. Everything above was read from them, and each is kept byte for byte so it can be checked after the vendor edits the original.

Identifiers: marketing_name RT-N12 D1

Judged by lifecycle-1 on 29 September 2026. How these verdicts are computed.

Machine-readable: JSON · RSS