EUVD-2026-36755
GHSA-h25f-jcx9-5wp6
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Unsanitized parameter to a shell handler yields low-complexity root RCE with no auth per reported vector; AV:N retained though real exposure is often LAN-adjacent.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
3DescriptionCVE.org
Tenda 5G03 V05.03.02.04 (Version 1.0) is vulnerable to Command injection in the function action_dial_call via the dialNumber parameter.
AnalysisAI
OS command injection in the Tenda 5G03 5G router (firmware V05.03.02.04, hardware version 1.0) lets attackers inject arbitrary shell commands through the unsanitized dialNumber parameter of the action_dial_call handler. The reported CVSS 3.1 vector rates it 9.8 (network, no privileges, no user interaction) with total technical impact, and publicly available exploit code exists in the sezangel/IOT-vul repository, though there is no public exploit identified as weaponized and no CISA KEV listing. EPSS is modest at 0.45% (36th percentile), indicating the flaw is disclosed with a POC but not yet showing broad exploitation activity.
Technical ContextAI
The affected component is the web/management backend of a Tenda 5G03 5G CPE router, specifically the action_dial_call function that initiates a cellular dial operation. This is a classic CWE-78 (Improper Neutralization of Special Elements used in an OS Command) flaw: the dialNumber value supplied by the client is passed into a system shell call (typically via system()/popen() or an equivalent on the embedded Linux firmware) without sanitization, so shell metacharacters (;, |, &&, backticks, $()) are interpreted as commands. Embedded SOHO/CPE devices like this run their web handlers as root, so injected commands generally execute with the highest privilege. The CPE string provided (cpe:2.3:a:n/a:n/a:*) is a placeholder with no meaningful vendor/product/version tokens, so exact affected-product enumeration must come from the description rather than the CPE feed.
RemediationAI
No vendor-released patch identified at time of analysis - the only referenced material is a proof-of-concept, not a fixed firmware build, so monitor Tenda's support/download portal for a firmware release superseding V05.03.02.04 and apply it once published. As compensating controls until a patched firmware exists: disable remote/WAN web management so the action_dial_call endpoint is not reachable from the Internet (side effect: administrators lose off-LAN management); restrict access to the router's HTTP management interface to a trusted management VLAN or specific admin IPs via firewall/ACL (side effect: breaks management from other network segments); place the device behind an upstream firewall that blocks inbound access to its management port; and change default credentials and segment the CPE away from sensitive assets to limit blast radius if compromised. Track the POC repository (https://github.com/sezangel/IOT-vul/tree/main/Tenda/5G03/action_dial_call) and the NVD entry for updates.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Same weakness CWE-78 – OS Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today