ASUS ZenWiFi BQ16 Pro

Firmware History

1. 3.0.0.6.102_37026

   2025-10-30

   - Apple Compatibility – Improved stability and compatibility with Apple devices and the latest OS updates. - Connection Stability – Enhanced AiMesh stability and overall system reliability. - Dual WAN – Optimized switching behavior when secondary WAN is unavailable. - Offline Status – Enhanced accuracy in UI display. - Enhanced input validation and refactored legacy string handling routines to ensure robust memory management. - Mitigated security risks in AiCloud service by enforcing strict credential verification, implementing robust file path validation, and hardening command execution logic to prevent unauthorized access and manipulation of system resources. - Implemented comprehensive validation and expanded command filtering in the web history API. - Fixed a privilege escalation vector in the IFTTT token exchange mechanism - Strengthened input validation and directory handling in the VPN configuration upload interface. - Fixed an issue that allowed certain user settings to be bypassed, improving overall user control and protection.

   Download from ASUS (opens in new tab)
2. 3.0.0.6.102_36998

   2025-08-13

   Important: After installing this firmware, we strongly recommend performing a factory-default reset to activate every new security adjustment. Security Enhancements - Password Policy Upgrade – Minimum 10 characters with at least 1 letter, 1 digit and 1 special symbol, and no consecutive identical characters; hardens defence against brute-force attacks. - HTTPS on 8443 – Management interface now served over TLS by default. - UPnP Disabled – Universal Plug and Play starts in the off state for reduced surface exposure. - AiCloud Authentication Hardening (CWE-287) – Added layered verification. - Authentication Logic Refactor – Removed redundant code paths for a lean sign-in flow. - Memory Safety Guard (CWE-476) – Introduced null-reference protections across critical services. - Enhanced IPsec Parameter Validation – The existing input checks have been hardened. - Data Exposure Mitigation (CWE-200) – Reinforced controls on sensitive pathways. - Detailed Audit Trails – Expanded logging within the authentication module. System Improvements - Connection Stability – Core algorithms refined for steadier links. - Scheduling Accuracy – Timed tasks execute reliably under PPPoE, PPTP and L2TP WAN modes. - Client List Maintenance – Resolved an issue that prevented offline devices from being removed from the client list