[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$flRX-YS_OAZvnza1FH0CJFV_ocOgdTmR8M6pehG3VCe0":3,"g5a-family:asus\u002Fgt-ac2900":68,"g5a-ex:asus\u002Fgt-ac2900@*":71},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":40,"seoMetadata":46,"meta":65},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"asus","gt-ac2900",0,4,1,"2021-05-06",[],"Gt-ac2900 by Asus is a technology product and 4 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,24,30,36],{"cveId":18,"description":19,"publishedDate":12,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":4,"epssScore":23},"CVE-2021-32030","The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra Mini before 3.0.0.4_384_46630 allows authentication bypass when processing remote input from an unauthenticated user, leading to unauthorized access to the administrator interface. This relates to handle_request in router\u002Fhttpd\u002Fhttpd.c and auth_check in web_hook.o. An attacker-supplied value of '\\0' matches the device's default value of '\\0' in some situations. Note: All versions of Lyra Mini and earlier which are unsupported (End-of-Life, EOL) are also affected by this vulnerability, Consumers can mitigate this vulnerability by disabling the remote access features from WAN.",9.8,"v3.1","Critical",0.99393,{"cveId":25,"description":26,"publishedDate":27,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":28,"epssScore":29},"CVE-2018-20334","An issue was discovered in ASUSWRT 3.0.0.4.384.20308. When processing the \u002Fstart_apply.htm POST data, there is a command injection issue via shell metacharacters in the fb_email parameter. By using this issue, an attacker can control the router and get shell.","2020-03-20",false,0.03773,{"cveId":31,"description":32,"publishedDate":27,"cvssScore":33,"cvssVersion":21,"severity":34,"isKev":28,"epssScore":35},"CVE-2018-20335","An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can trigger a DoS of the httpd service via the \u002FAPP_Installation.asp?= URI.",7.5,"High",0.01408,{"cveId":37,"description":38,"publishedDate":27,"cvssScore":33,"cvssVersion":21,"severity":34,"isKev":28,"epssScore":39},"CVE-2018-20333","An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can request \u002Fupdate_applist.asp to see if a USB device is attached to the router and if there are apps installed on the router.",0.01209,[41],{"cveId":18,"description":19,"publishedDate":12,"cvssScore":20,"severity":22,"isKev":4,"epssScore":23,"cisaVulnName":42,"cisaDateAdded":43,"cisaShortDescription":44,"cisaRequiredAction":45},"ASUS Routers Improper Authentication Vulnerability","2025-06-02","ASUS Lyra Mini and ASUS GT-AC2900 devices contain an improper authentication vulnerability that allows an attacker to gain unauthorized access to the administrative interface. The impacted products could be end-of-life (EoL) and\u002For end-of-service (EoS). Users should discontinue product utilization.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"title":47,"metaDescription":48,"keywords":49,"structuredData":50},"Gt-ac2900 by Asus - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Gt-ac2900 by Asus with 4 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Gt-ac2900 vulnerabilities, Gt-ac2900 security, Gt-ac2900 CVE, Asus Gt-ac2900, Gt-ac2900 threat intelligence, Asus security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Gt-ac2900 KEV, Gt-ac2900 exploited vulnerabilities",{"@context":51,"@type":52,"name":53,"description":48,"url":54,"manufacturer":55,"applicationCategory":59,"softwareVersion":60,"mainEntity":61},"https:\u002F\u002Fschema.org","SoftwareApplication","Gt-ac2900","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fasus\u002Fgt-ac2900",{"@type":56,"name":57,"url":58},"Organization","Asus","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fasus","Security Software","Multiple versions",{"@type":62,"name":63,"description":64,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Gt-ac2900 Security Vulnerabilities","Security vulnerabilities affecting Gt-ac2900 by Asus",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":66,"apiVersion":67},"2026-10-19T00:07:35.709Z","3.0",[69],{"product":70,"cves":11},"gt-ac2900_firmware",{"rows":72,"total":11,"capped":28,"failed":9},[73],{"cveId":18,"name":42,"severity":22,"cvss":20,"added":43,"epss":23,"published":74,"ranges":75,"checked":4,"hits":76,"covers":28},"2021-05-06T15:15:07.973",[],[]]