CVE-2021-32030Vulnerability

ASUS Routers Improper Authentication Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on 2 Jun 2025.

Reported by 1 independent source · first reported 11 Jun 2026 by Sekoia.io · last reported 11 Jun 2026

Last reported 4 months ago

CISA KEVAdded 2 Jun 2025
Fix due 23 Jun 2025
Used by ransomware: not knownCISA KEV catalogue

EPSS99.4%
higher than 99% of CVEsFIRST EPSS, as of 21 Oct 2026

What the reports say

1 report, newest first · the exact sentence from each

“…US routers with the objective of extracting the router's firmware version and establishing an SSH access on port 53282 thanks to the CVE-2021-32030.”

Sekoia.ioVendor11 Jun 2026
ViciousTrap: Turning Edge Devices into Honeypots at Scale

Indicators reported together

named in the same reports

101.99.91[.]151in 1 report
111.90.148[.]151in 1 report
111.90.148[.]112in 1 report
101.99.91[.]239in 1 report
c15f77d64b7bbfb3…95562b37dec4in 1 report
212.232.23[.]217in 1 report
155.254.60[.]160in 1 report
101.99.94[.]173in 1 report
103.43.19[.]61in 1 report
103.56.17[.]163in 1 report
103.43.18[.]59in 1 report
212.232.23[.]168in 1 report
212.232.23[.]143in 1 report
101.99.90[.]20in 1 report
d92d2f102e1e4178…a799507e3e77in 1 report
20dff1120d968330…4e59474dc6bdin 1 report

Copy these 16 indicators · defanged

16 indicators, defanged, one per line

101.99.91[.]151
111.90.148[.]151
111.90.148[.]112
101.99.91[.]239
c15f77d64b7bbfb37f00ece5a62095562b37dec4
212.232.23[.]217
155.254.60[.]160
101.99.94[.]173
103.43.19[.]61
103.56.17[.]163
103.43.18[.]59
212.232.23[.]168
212.232.23[.]143
101.99.90[.]20
d92d2f102e1e417894bd2920e477638edfae7f08d78aee605b1ba799507e3e77
20dff1120d968330c703aa485b3ea0ece45a227563ca0ffa395e4e59474dc6bd

Also named with it: CVE-2023-20118

Thanks — we review every report.

Report a wrong value