According to the official ASUS security advisory, the bug allows an unauthenticated attacker situated on an adjacent network to completely bypass security protocols and gain full admin access to the router. The attacker needs to be in relative local proximity rather than attacking entirely across the internet, which softens the threat somewhat, but compromising a network's central hub without any credentials is still rated a critical risk. Updates can be installed automatically through the router's web administration portal or downloaded manually from the ASUS Support and Wi-Fi Router product pages.

For anyone who cannot flash the new firmware immediately, ASUS has outlined temporary mitigations: disable remote access from the WAN so the management interface is reachable only from trusted local machines, use strong and unique administrator and Wi-Fi passwords, watch for untrusted devices joining the network, review and remove any unrecognized companion-app sessions, and reboot the router after installing the patch.