ASUS RT-AX58U
ASUS · Wi-Fi 6 home router (AX3000), four 1 Gb/s LAN ports · RT-AX58U
what it is
A router with a Wi-Fi 6 access point in the AX3000 class: two streams each on 2.4 GHz (up to 574 Mb/s) and on 5 GHz (up to 2402 Mb/s), with channels up to 160 MHz. On the back: one WAN port and four LAN ports, all 1 Gb/s, plus one USB 3.2 Gen1 port (manufacturer data).
Two different hardware versions are sold under one name. The manufacturer lists a triple-core 1.5 GHz processor for V1 and a quad-core 1.7 GHz one for V2 — with the same 512 MB RAM and 256 MB flash. The version is revealed by the designation the device uses for itself in its interface: RT-AX58U_V2. On the login page both versions appear as RT-AX58U.
The V2 version for Europe is on the list of end-of-support products (the manufacturer listed it as “RT-AX58U V2 (only EU)”). Firmware 3.0.0.4.388_25277 of October 30, 2025 was, in October 2026, the latest on the download page of the RT-AX58U model (the V2 page does not publish a separate firmware list) — further security fixes should not be expected.
what we read from it
From the interface used by the router's panel and the manufacturer's app, after logging in with the administrator account. Measured on a working V2 unit (firmware 388_25277):
- CPU load separately for each of the four cores — cumulative counters, so the percentage is calculated from two readings a few seconds apart.
- RAM usage and its total size.
- CPU temperature.
- Traffic counters separately for the internet, the wired part and each of the two radios — two readings give the instantaneous throughput.
- Internet connection status: whether it is up, type (DHCP, PPPoE and others), address, gateway, DNS servers and address lease time.
- List of devices on the local network with address, name and whether they are connected by cable.
- Uptime since the last boot and firmware version.
- Status of security-relevant services: panel access from the internet, SSH, Telnet, UPnP, port forwarding, DMZ, dynamic DNS — each as a separate setting to read and compare against the recommendation.
Measurement from October 19, 2026, V2 unit behind Starlink, router Wi-Fi disabled, traffic from one computer:
| measured | |
|---|---|
| CPU (4 cores, 10 s) | 3.7 % · 0.3 % · 1.3 % · 0.0 % |
| memory | 37.8 % of 512 MB |
| CPU temperature | 46 °C |
| latency to a public DNS server through the router (20 attempts) | 16–28 ms, average 19 ms, no loss |
what we cannot read
- Continuous monitoring in the stock firmware is not available over SNMP — the manufacturer does not state that this model supports it, and we do not assume it does. Reading goes through the panel interface.
- Link quality on the provider side — the router sees only its own WAN port. Latency and loss are measured from outside, not from its counters.
- Radio details such as channel utilization or noise level — the panel interface does not expose them in the reading we checked.
what to watch out for
- Disable everything that opens the router to the internet: panel access from WAN, AiCloud, dynamic DNS, VPN server, FTP, UPnP and port forwarding. The model was on the list of devices vulnerable to authentication bypass (CVE-2024-3080, firmware up to 388_23925), and the AiCloud service had critical vulnerabilities in 2025 — for a device without support this is the only real protection.
- Check the SSH keys stored in the settings memory. A campaign from 2025 added its own SSH key to ASUS routers and enabled SSH on a non-standard port; the entry survives a firmware update. An empty key entry and SSH disabled is the state you want to see.
- The first-time setup wizard can set access point mode instead of router mode. After the wizard, check the operating mode — in access point mode the router does not hand out addresses and does not do NAT, although it appears to be working.
- Behind Starlink in bypass mode the router gets an address from the operator's shared NAT pool (the range reserved for this purpose by RFC 6598). There is no double NAT at home, but IPv4 port forwarding from the internet will not work anyway without a plan with a public address.
- Changing the administrator password in newer firmware requires entering the current password and goes through a separate panel dialog — a regular settings save will not do it.
how we checked
On an RT-AX58U V2 unit with firmware 3.0.0.4.388_25277, after a reset to factory settings, we read all settings back through the same interface after writing them, and verified the radio shutdown additionally with an over-the-air scan. Technical data, support status and vulnerabilities — from the manufacturer's pages (specifications, end-of-support product list, technical support) and from public security advisories.
full parameter list
A full parameter list for this model is not here yet — the ones described above are those we have read and verified. A missing list does not mean the device exposes nothing more.