The administrator application on ASUS GT-AC2900 and Lyra Mini devices allows authentication bypass when processing remote input from an unauthenticated user, leading to unauthorized access to the administrator interface. This issue relates to the `handle request` function in `router/httpd/httpd.c` and `auth check` in `web hook.o`. An attacker-supplied value of `0` matches the device's default value of `0` in some situations. There have been attempts to exploit this issue, with 379,868 attempts reported as failed due to a tiny error.