EXPOSURES › CVE-2021-32030
CVE-2021-32030
HIGH ⌖ ON CISA KEV · EXPLOITEDASUS routers with improper authentication exposed to unauthorized access
ASUS Lyra Mini and GT-AC2900 routers had an unpatched vulnerability allowing attackers to access the admin interface without credentials, posing a high risk to DIB networks.
Shame score — End-of-life and end-of-service models were affected, leading to unpatched vulnerabilities exposed to the internet.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
ASUS Lyra Mini and ASUS GT-AC2900 devices contain an improper authentication vulnerability that allows an attacker to gain unauthorized access to the administrative interface. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.