CVE-2021-32030 Scanner

The ASUS GT-AC2900 is a high-performance dual-band wireless router designed for homes and small offices, offering fast and reliable internet connectivity. Its administrator application is a web-based interface used to manage and configure router settings, accessible from any device on the network. This application is critical for maintaining network security and functionality.

CVE-2021-32030 is a critical authentication bypass vulnerability in the ASUS GT-AC2900 administrator application. It arises due to improper handling of authentication checks in the device's firmware, specifically in the handle_request function within router/httpd/httpd.c and the auth_check function in web_hook.o. The flaw allows an attacker to bypass authentication by providing a null byte value that matches the default value in certain conditions.

The vulnerability is triggered when an attacker sends a specially crafted HTTP request to the router's web interface. The vulnerable endpoint is the administrator login page, where the auth_check function fails to properly validate the authentication token when a null byte is supplied. This bypasses the standard authentication mechanism, granting unauthorized access to the admin panel.

If exploited, an attacker gains full administrative control over the router, enabling them to modify network settings, intercept traffic, deploy malware, or launch further attacks on the internal network. With a CVSS score of 9.8, this vulnerability poses a severe risk to network security and data integrity.