[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fW_YcXdoxFTkU-zhQ93qV13D4sJrXm0TSItmtRwKxdd0":3,"g5a-risk:CVE-2021-32030":166},{"success":4,"data":5,"meta":164},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":46,"epssPercentile":27,"epssTimeSeries":47,"severity":48,"affectedProducts":49,"affectedProductsCount":65,"references":66,"referencesCount":93,"weaknesses":94,"weaknessesCount":102,"isActivelyExploited":4,"cisaInfo":103,"otxData":27,"relatedBlogPosts":104,"seoMetadata":105,"configurations":130,"relatedVendorCves":155,"notableEvents":156},"CVE-2021-32030","What is CVE-2021-32030?","The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra Mini before 3.0.0.4_384_46630 allows authentication bypass when processing remote input from an unauthenticated user, leading to unauthorized access to the administrator interface. This relates to handle_request in router\u002Fhttpd\u002Fhttpd.c and auth_check in web_hook.o. An attacker-supplied value of '\\0' matches the device's default value of '\\0' in some situations. Note: All versions of Lyra Mini and earlier which are unsupported (End-of-Life, EOL) are also affected by this vulnerability, Consumers can mitigate this vulnerability by disabling the remote access features from WAN.","The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra Mini before 3.0.0.4_384_46630 allows authentication bypass when pro...","2021-05-06T15:15:07.973","2025-10-22T00:17:36.587",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":34,"CVSSMetricV2":35,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[],[36],{"Source":17,"Type":18,"CVSSData":37,"BaseSeverity":25,"ExploitabilityScore":43,"ImpactScore":44,"ACInsufInfo":45,"ObtainAllPrivilege":45,"ObtainUserPrivilege":45,"ObtainOtherPrivilege":45,"UserInteractionRequired":45},{"Version":38,"VectorString":39,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":40,"IntegrityImpact":40,"AvailabilityImpact":40,"BaseScore":41,"BaseSeverity":42,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,"",10,6.4,false,0.99393,[46,46,46,46,46,46,46],"Critical",[50,55,59,62],{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":4},"asus","lyra_mini_firmware","*","cpe:2.3:o:asus:lyra_mini_firmware:*:*:*:*:*:*:*:*",{"vendor":51,"product":56,"version":57,"criteria":58,"vulnerable":45},"lyra_mini","-","cpe:2.3:h:asus:lyra_mini:-:*:*:*:*:*:*:*",{"vendor":51,"product":60,"version":53,"criteria":61,"vulnerable":4},"gt-ac2900_firmware","cpe:2.3:o:asus:gt-ac2900_firmware:*:*:*:*:*:*:*:*",{"vendor":51,"product":63,"version":57,"criteria":64,"vulnerable":45},"gt-ac2900","cpe:2.3:h:asus:gt-ac2900:-:*:*:*:*:*:*:*",4,[67,73,78,81,85,87,89],{"url":68,"source":69,"tags":70},"https:\u002F\u002Fgithub.com\u002Fatredispartners\u002Fadvisories\u002Fblob\u002Fmaster\u002FATREDIS-2020-0010.md","GitHub",[71,72],"Exploit","Third Party Advisory",{"url":74,"source":75,"tags":76},"https:\u002F\u002Fwww.asus.com\u002FNetworking-IoT-Servers\u002FWiFi-Routers\u002FASUS-Gaming-Routers\u002FRT-AC2900\u002FHelpDesk_BIOS\u002F","Asus",[77],"Product",{"url":79,"source":75,"tags":80},"https:\u002F\u002Fwww.asus.com\u002Fus\u002Fsupportonly\u002Flyra%20mini\u002Fhelpdesk_bios\u002F",[77],{"url":82,"source":83,"tags":84},"https:\u002F\u002Fwww.atredis.com\u002Fblog\u002F2021\u002F4\u002F30\u002Fasus-authentication-bypass","Atredis",[71],{"url":68,"source":69,"tags":86},[71,72],{"url":74,"source":75,"tags":88},[77],{"url":90,"source":91,"tags":92},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2021-32030","CISA",[],7,[95],{"id":96,"name":97,"description":98,"extendedDescription":42,"status":99,"abstraction":100,"structure":101},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","Draft","Class","Simple",1,{"shortDescription":42,"requiredAction":42,"vulnerabilityName":42,"dateAdded":27},[],{"title":106,"metaDescription":107,"keywords":108,"canonicalUrl":109,"structuredData":110},"What is CVE-2021-32030? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-32030, a critical severity cyber security vulnerability from 2021. High exploit probability (99.4%). The administrator app...","CVE-2021-32030, CVE-2021-32030 vulnerability, CVE-2021-32030 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, asus security, lyra_mini_firmware vulnerability, lyra_mini vulnerability, gt-ac2900_firmware vulnerability, gt-ac2900 vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2021-32030",{"@context":111,"@type":112,"headline":106,"description":107,"datePublished":10,"dateModified":11,"author":113,"publisher":117,"about":121,"mainEntityOfPage":125,"articleSection":128,"keywords":129},"https:\u002F\u002Fschema.org","TechArticle",{"@type":114,"name":115,"url":116},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":114,"name":115,"url":116,"logo":118},{"@type":119,"url":120},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":122,"name":6,"description":123,"additionalType":124},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":126,"@id":127},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-32030","Cybersecurity","CVE-2021-32030, CVE-2021-32030 vulnerability, CVE-2021-32030 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[131,144],{"Operator":132,"Negate":27,"Nodes":133},"AND",[134,140],{"Operator":135,"Negate":45,"CPEMatch":136},"OR",[137],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":138,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":139,"VersionEndIncluding":27},"EDC24A96-81AB-4F93-951F-4BE291CF4817","3.0.0.4.384.46630",{"Operator":135,"Negate":45,"CPEMatch":141},[142],{"Vulnerable":45,"Criteria":58,"MatchCriteriaID":143,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"16CD4EE9-D898-47E2-8A86-A0716CDB03A3",{"Operator":132,"Negate":27,"Nodes":145},[146,151],{"Operator":135,"Negate":45,"CPEMatch":147},[148],{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":149,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":150,"VersionEndIncluding":27},"5B364172-2986-4983-91BF-047F59D140DF","3.0.0.4.386.42643",{"Operator":135,"Negate":45,"CPEMatch":152},[153],{"Vulnerable":45,"Criteria":64,"MatchCriteriaID":154,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"B581C286-7C47-42BF-8876-243285409374",[],[157],{"id":158,"eventType":159,"eventTime":160,"details":161,"label":162,"color":163},"8f8b990d-68e4-4ce1-97db-f6df05064603","NEW_CISA","2025-06-09T14:43:34.440058+00:00","CVE added to CISA Known Exploited Vulnerabilities","Added to CISA KEV","red",{"lastModified":11,"cacheTime":165,"version":38},1792356278427,{"score":167,"band":48,"action":168,"scoredAt":169},90,"Emergency patch","2026-10-16T06:51:02.380939+00:00"]