ASUS BRT-AC828 Firmware version 3.0.0.4.380.7432 (Facebook Wi-Fi special version)
Security fixed items
* [Security] fixed LAN RCE vulnerability 
* dnsmasq: apply security release CVE fixes
* dnsmasq: update to 2.78test2-12-gb697fbb, fix CVE-2017-13704
* Modify Smart Sync Stored XSS issue.
* [Security]:fixed nvram_dump can dump any file and run any system command
* [Security][CVE-2018-5721]: fixed buffer overflow in ej_update_variables when action_script includes '_wan_if' substring
* [IPSec] add CVE patch for CVE-2017-11185
* [IPSec] add CVE patch for CVE-2017-9022, CVE-2017-9023
* [httpd]Fixed buffer overflow in check_xss_blacklist()

Bug fixed items
* Fixed IP conflicts detection code.
* Fixed DUT reboot issue if number of MAC/IP binding rules greater than 30.
* Main Wireless SSID not work if one or more Guest SSID configured in VLAN.
* igmpproxy may listen on secondary WAN.
* dnsmasq: update to 2.77-13-g69a815a, fix reserved dhcp leases
* Tagged-based VLAN page can't be shown if language is FI (Suomi) or NL (Nederlands)
* Sync Advanced_TagBasedVLAN_Content.asp with commit 72cf990 of ac88q branch for SQ bug#868.
* Some LAN ports may not work if 802.3ad is enabled.
* Can't login OpenVPN server.
* Failed to connect OpenVPN server if ID has a [#] inside.
* Modify IPSec UI for the IKE v1, which only support single subnet (IKE v2 support multi-subnet)
* Port range of port-trigger feature doesn't work.
* Wrong message if client can't connected to DUT after firmware upgrade.
* Remove surge wave caused by redial from traffic graph.
* Remove unsupported UI functions: Bandwidth Limiter on Guest Network of AP mode, "Secure Your Router” button on AiProtection.
* Fixed Multi-language UI issues
* Fix the quotation marks will cause JS error in FR, UK
* Live Update get info file : Correct equal equation of firmver value

Modified items
* Fix model number and serial number information of WPS.
* Added new command to get blocked ACS channel.
* Enable IPSec VPN switch to SW crypto and enlarge IPSec server connection number.
* Modify supported symbols or special character on PSW and XAUTH of IPSec VPN
* Add USB modem support: Huawei E3372. 
* dnsmasq: ignore localhost names from broken dhcp clients (like Samsung Smart TV)
* dnsmasq: update to stable 2.78

Please unzip the firmware file first then check the MD5 code.
MD5: 214eb052ca4daa49324eeb0b69451599