NVD disclosure day

Published threat advisories for May 6, 2021

CVE advisoryKnown Exploit

CVE-2021-32030

ASUS Router Authentication Bypass Vulnerability

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

A vulnerability in ASUS routers allows authentication bypass, potentially granting attackers unauthorized access to the administrator interface. This poses a risk to organizational security by allowing unauthorized control over network settings and data.

• CISA KEV

CVE advisoryKnown Exploit

CVE-2021-1498

Cisco HyperFlex HX: Command Injection via Web Interface

Halo Surface Signal: 3 out of 5 — possibly public-facing.

Cisco HyperFlex HX management interfaces are affected by vulnerabilities that allow unauthenticated remote attackers to inject commands. This poses a business risk by enabling unauthorized system control, potentially leading to data compromise or operational disruption. Affected organizations should prioritize applying

• CISA KEV