Live › vulnerability › CVE-2021-32030
Go to dashboardASUS Lyra Mini and GT-AC2900 routers have an authentication flaw that lets an attacker reach the router's administrative interface without valid credentials. CISA lists it as actively exploited in the wild.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| ASUS Routers | vendor | – | – |
| asus lyra mini firmware | vendor | < 3.0.0.4.384.46630 | 3.0.0.4.384.46630 |
| asus gt-ac2900 firmware | vendor | < 3.0.0.4.386.42643 | 3.0.0.4.386.42643 |
Unknown from the sources.
Apply the vendor mitigations per ASUS instructions, or discontinue use of the affected device if no mitigation exists; the sources say these products may be end-of-life or end-of-service.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra Mini before 3.0.0.4_384_46630 allows authentication bypass when processing remote input from an unauthenticated user, leading to unauthorized access to the administrator interface. This relates to handle_request in router/httpd/httpd.c and auth_check in web_hook.o. An attacker-supplied value of '\0' matches the device's default value of '\0' in some situations. Note: All versions of Lyra Mini and earlier which are unsupported (End-of-Life, EOL) are also affected by this vulnerability, Consumers can mitigate this vulnerability by disabling the remote access features from WAN.
This page as .md · .json · in your agent: get_signal("CVE-2021-32030")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.