CISA Adds Five Known Exploited Vulnerabilities to Catalog

CISA added five new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2021-32030link is external ASUS Routers Improper Authentication Vulnerability CVE-2023-39780link is external ASUS RT-AX55 Routers OS Command Injection Vulnerabilit...

CVE-2021-32030

The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra Mini before 3.0.0.438446630 allows authentication bypass when processing remote input from an unauthenticated user, leading to unauthorized access to the administrator interface. This relates to handlereques...

CVE-2021-32030

creationtimestamp| type| source ---|---|--- 2021-05-07 17:47:26+00:00| seen| Telegram/364D1NteulD3hI6yvTR5Wv3Y4GwSn37bdCzEYQa2B5avU0 2021-05-09 19:48:10+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3331 2023-04-27 09:58:59+00:00| confirmed|...

CVE-2021-32030

The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra Mini before 3.0.0.438446630 allows authentication bypass when processing remote input from an unauthenticated user, leading to unauthorized access to the administrator interface. This relates to handlereques...

CVE-2021-32030

The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra Mini before 3.0.0.438446630 allows authentication bypass when processing remote input from an unauthenticated user, leading to unauthorized access to the administrator interface. This relates to handlereques...

CVE-2021-32030

CVE-2021-32030 affects ASUS GT-AC2900 routers (and Lyra Mini) with firmware versions before 3.0.0.4.386.42643 (Lyra Mini before 3.0.0.4_384_46630). The vulnerability enables an authentication bypass by processing remote input from an unauthenticated user, yielding unauthorized access to the admin...