[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fW_YcXdoxFTkU-zhQ93qV13D4sJrXm0TSItmtRwKxdd0":3,"g5a-risk:CVE-2021-32030":167},{"success":4,"data":5,"meta":165},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":46,"epssPercentile":27,"epssTimeSeries":47,"severity":49,"affectedProducts":50,"affectedProductsCount":66,"references":67,"referencesCount":94,"weaknesses":95,"weaknessesCount":103,"isActivelyExploited":4,"cisaInfo":104,"otxData":27,"relatedBlogPosts":105,"seoMetadata":106,"configurations":131,"relatedVendorCves":156,"notableEvents":157},"CVE-2021-32030","What is CVE-2021-32030?","The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra Mini before 3.0.0.4_384_46630 allows authentication bypass when processing remote input from an unauthenticated user, leading to unauthorized access to the administrator interface. This relates to handle_request in router\u002Fhttpd\u002Fhttpd.c and auth_check in web_hook.o. An attacker-supplied value of '\\0' matches the device's default value of '\\0' in some situations. Note: All versions of Lyra Mini and earlier which are unsupported (End-of-Life, EOL) are also affected by this vulnerability, Consumers can mitigate this vulnerability by disabling the remote access features from WAN.","The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra Mini before 3.0.0.4_384_46630 allows authentication bypass when pro...","2021-05-06T15:15:07.973","2025-10-22T00:17:36.587",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":34,"CVSSMetricV2":35,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[],[36],{"Source":17,"Type":18,"CVSSData":37,"BaseSeverity":25,"ExploitabilityScore":43,"ImpactScore":44,"ACInsufInfo":45,"ObtainAllPrivilege":45,"ObtainUserPrivilege":45,"ObtainOtherPrivilege":45,"UserInteractionRequired":45},{"Version":38,"VectorString":39,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":40,"IntegrityImpact":40,"AvailabilityImpact":40,"BaseScore":41,"BaseSeverity":42,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,"",10,6.4,false,0.99393,[48,48,48,46,46,46,46],0.99351,"Critical",[51,56,60,63],{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"asus","lyra_mini_firmware","*","cpe:2.3:o:asus:lyra_mini_firmware:*:*:*:*:*:*:*:*",{"vendor":52,"product":57,"version":58,"criteria":59,"vulnerable":45},"lyra_mini","-","cpe:2.3:h:asus:lyra_mini:-:*:*:*:*:*:*:*",{"vendor":52,"product":61,"version":54,"criteria":62,"vulnerable":4},"gt-ac2900_firmware","cpe:2.3:o:asus:gt-ac2900_firmware:*:*:*:*:*:*:*:*",{"vendor":52,"product":64,"version":58,"criteria":65,"vulnerable":45},"gt-ac2900","cpe:2.3:h:asus:gt-ac2900:-:*:*:*:*:*:*:*",4,[68,74,79,82,86,88,90],{"url":69,"source":70,"tags":71},"https:\u002F\u002Fgithub.com\u002Fatredispartners\u002Fadvisories\u002Fblob\u002Fmaster\u002FATREDIS-2020-0010.md","GitHub",[72,73],"Exploit","Third Party Advisory",{"url":75,"source":76,"tags":77},"https:\u002F\u002Fwww.asus.com\u002FNetworking-IoT-Servers\u002FWiFi-Routers\u002FASUS-Gaming-Routers\u002FRT-AC2900\u002FHelpDesk_BIOS\u002F","Asus",[78],"Product",{"url":80,"source":76,"tags":81},"https:\u002F\u002Fwww.asus.com\u002Fus\u002Fsupportonly\u002Flyra%20mini\u002Fhelpdesk_bios\u002F",[78],{"url":83,"source":84,"tags":85},"https:\u002F\u002Fwww.atredis.com\u002Fblog\u002F2021\u002F4\u002F30\u002Fasus-authentication-bypass","Atredis",[72],{"url":69,"source":70,"tags":87},[72,73],{"url":75,"source":76,"tags":89},[78],{"url":91,"source":92,"tags":93},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2021-32030","CISA",[],7,[96],{"id":97,"name":98,"description":99,"extendedDescription":42,"status":100,"abstraction":101,"structure":102},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","Draft","Class","Simple",1,{"shortDescription":42,"requiredAction":42,"vulnerabilityName":42,"dateAdded":27},[],{"title":107,"metaDescription":108,"keywords":109,"canonicalUrl":110,"structuredData":111},"What is CVE-2021-32030? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2021-32030, a critical severity cyber security vulnerability from 2021. High exploit probability (99.4%). The administrator app...","CVE-2021-32030, CVE-2021-32030 vulnerability, CVE-2021-32030 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, asus security, lyra_mini_firmware vulnerability, lyra_mini vulnerability, gt-ac2900_firmware vulnerability, gt-ac2900 vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2021-32030",{"@context":112,"@type":113,"headline":107,"description":108,"datePublished":10,"dateModified":11,"author":114,"publisher":118,"about":122,"mainEntityOfPage":126,"articleSection":129,"keywords":130},"https:\u002F\u002Fschema.org","TechArticle",{"@type":115,"name":116,"url":117},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":115,"name":116,"url":117,"logo":119},{"@type":120,"url":121},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":123,"name":6,"description":124,"additionalType":125},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":127,"@id":128},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2021-32030","Cybersecurity","CVE-2021-32030, CVE-2021-32030 vulnerability, CVE-2021-32030 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[132,145],{"Operator":133,"Negate":27,"Nodes":134},"AND",[135,141],{"Operator":136,"Negate":45,"CPEMatch":137},"OR",[138],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":139,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":140,"VersionEndIncluding":27},"EDC24A96-81AB-4F93-951F-4BE291CF4817","3.0.0.4.384.46630",{"Operator":136,"Negate":45,"CPEMatch":142},[143],{"Vulnerable":45,"Criteria":59,"MatchCriteriaID":144,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"16CD4EE9-D898-47E2-8A86-A0716CDB03A3",{"Operator":133,"Negate":27,"Nodes":146},[147,152],{"Operator":136,"Negate":45,"CPEMatch":148},[149],{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":150,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":151,"VersionEndIncluding":27},"5B364172-2986-4983-91BF-047F59D140DF","3.0.0.4.386.42643",{"Operator":136,"Negate":45,"CPEMatch":153},[154],{"Vulnerable":45,"Criteria":65,"MatchCriteriaID":155,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"B581C286-7C47-42BF-8876-243285409374",[],[158],{"id":159,"eventType":160,"eventTime":161,"details":162,"label":163,"color":164},"8f8b990d-68e4-4ce1-97db-f6df05064603","NEW_CISA","2025-06-09T14:43:34.440058+00:00","CVE added to CISA Known Exploited Vulnerabilities","Added to CISA KEV","red",{"lastModified":11,"cacheTime":166,"version":38},1793224701143,{"score":168,"band":49,"action":169,"scoredAt":170},90,"Emergency patch","2026-07-01T10:26:22.512356+00:00"]