EUVD-2026-19001Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V8 - Authorization Access control enforcement
MITRE ATT&CK
1 technique across 1 tactic: Defense Evasion The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Impact | This vulnerability presents moderate to high real-world risk despite the 7.3 CVSS score. The attack vector is network-based with low complexity (AC:L) and requires no user interaction or authentication (PR:N, UI:N), making it easily exploitable by remote attackers. The CVSS temporal metrics show proof-of-concept exploit code exists (E:P) and only workarounds are available (RL:W), confirming the public availability of exploit code as stated in tags and description. However, the impact is rated as Low across confidentiality, integrity, and availability (C:L/I:L/A:L), suggesting partial compromise rather than full system takeover. The vulnerability is not listed in CISA KEV, indicating no confirmed active exploitation campaigns at time of analysis. Primary risk factors include: widespread deployment of consumer routers with default configurations, network-accessible attack surface, and authenticated exploit code. The lack of vendor-released patch (only workarounds available per RL:W metric) extends the exposure window for affected devices. |
| Exploit ScenarioDerived | An unauthenticated remote attacker identifies a Tenda 4G03 Pro router exposed to the internet via automated scanning for devices with httpd services on standard web ports. Using publicly available exploit code, the attacker sends specially crafted HTTP requests to the /bin/httpd endpoint that bypass authentication controls due to improper access validation. Upon successful exploitation, the attacker gains administrative access to the router's configuration interface without valid credentials, enabling them to modify DNS settings for traffic redirection, extract Wi-Fi credentials and connected device information, or establish persistent backdoor access for man-in-the-middle attacks against the victim's network traffic. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Apr 04, 2026
Improper access controls in Tenda 4G03 Pro firmware (versions up to 04.03.01.53) enable unauthenticated remote attackers to bypass authentication mechanisms via the /bin/httpd binary, potentially achieving unauthorized administrative access to the router. This vulnerability has publicly available exploit code and affects consumer-grade 4G routers commonly used for home and small office networks. EPSS data not available, but the combination of network-accessible attack vector, low complexity, and public exploit elevates real-world risk.
RemediationAI
No vendor-released patch identified at time of analysis; CVSS remediation level indicates only workarounds available (RL:W). Users should immediately check the official Tenda support website (https://www.tenda.com.cn/) for updated firmware releases beyond version 04.03.01.53 that may address this access control flaw. As interim mitigation, disable remote administration features and restrict web interface access to trusted LAN segments only, preventing internet-facing exposure of the httpd service. Implement network-level access controls (firewall rules) to block external access to the router's management interface on standard ports (TCP 80/443). Consider replacing affected devices with alternative router models if Tenda does not release timely security updates. Monitor VulDB entries (https://vuldb.com/vuln/355279) for patch availability updates and additional technical indicators of compromise.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The vulnerability resides in the /bin/httpd binary of Tenda 4G03 Pro routers, which implements the web-based administrative interface. The flaw is classified as CWE-284 (Improper Access Control), indicating insufficient enforcement of access restrictions on administrative functions. The httpd daemon likely fails to properly validate authentication credentials or session tokens before granting access to privileged operations. As a 4G LTE router product (CPE: cpe:2.3:a:tenda:4g03_pro), this device provides internet connectivity and network routing functions, making authentication bypass particularly severe as it exposes all router configuration and network traffic controls to unauthorized parties. The CVSS vector AV:N indicates the attack is executable over the network without requiring local access, and PR:N confirms no authentication is required to exploit the flaw.
Know when 4G03 Pro gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Primary rating from Vendor (VulDB) · only source for this CVE.
CVSS VectorVendor: VulDB
Lifecycle Timeline
2DescriptionCVE.org
A security flaw has been discovered in Tenda 4G03 Pro up to 1.0/1.1/04.03.01.53/192.168.0.1. Affected by this vulnerability is an unknown functionality of the file /bin/httpd. The manipulation results in improper access controls. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.
Executive ViewAI
Tenda 4G03 Pro routers (firmware ≤04.03.01.53) contain an unauthenticated remote access control bypass that allows attackers to gain administrative access without credentials. With publicly available exploit code and widespread deployment in home and small office networks, this vulnerability poses immediate risk to network perimeter security and data confidentiality for affected organizations.
No vendor-released patch identified at time of analysis. Interim mitigations: (1) Restrict router management interface access via firewall rules to authorized IP addresses only; (2) Disable remote management features entirely if not operationally required; (3) Isolate affected routers to a separate VLAN from critical business systems; (4) Monitor router access logs for unauthorized login attempts; (5) Prepare vendor replacement contingency plan pending patch release.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
GitHub PoC
Exploit-DB