ASUS has released firmware updates to address critical vulnerabilities in several popular router models. One major flaw, tracked as CVE-2024-3080 (CVSS 9.8/10), is an authentication bypass vulnerability allowing remote attackers to log into devices without authentication. Affected models include ZenWiFi XT8, RT-AX57, RT-AC86U, and RT-AC68U, with specific firmware updates provided to mitigate the issue. Another critical vulnerability, tracked as CVE-2024-3912 (CVSS 9.8/10), allows remote attackers to execute system commands via arbitrary firmware upload. Impacted models include DSL-N17U, DSL-N55U, and DSL-AC56U. Some older models will not receive updates due to end-of-life status, and users are advised to disable remote access features if they cannot immediately replace these devices. Additionally, ASUS updated Download Master to version 3.1.0.114 to fix several medium to high-severity issues, enhancing overall security. CTIX analysts urge users to update their firmware and follow recommended security practices, such as using strong passwords and disabling remote access features.