Security Advisory: Cross-Site Scripting, Denial of Service and Remote Code execution vulnerabilities (CVE-2024-41583 ~ CVE-2024-41596)

On June 20th, we identified multiple vulnerabilities, and we have promptly addressed this issues and released corresponding firmware updates that include necessary security enhancements. These vulnerabilities are listed under CVE-2024-41583 to CVE-2024-41596.

If you haven't upgraded yet, please do so immediately. Before updating,back up your current configuration (System Maintenance > Config Backup) in case you need to restore it later. Be sure to upggrade with the ".ALL" file to avoid wiping the previous settings. If upgrading from much older firmware version, review the release notes carefully for any upgrading instructions.

If remote access is enabled on your router, disable it unless necessary, and use an access control list (ACL) and enable 2FA if possible. If your Router is not running patched firmware (see table below), disable both remote access (admin) and SSL VPN. Due to ACL doesn't apply to SSL VPN (Port 443) so you should also temporarily disable SSL VPN until you've upgraded. New firmwares with security updates for these vulnerabilities are listed below.