24277 matches found
CVE-2026-38063
Tenda 5G03 V05.03.02.04 Version 1.0 is vulnerable to Command injection in the function actionradioonwithiaapn via the ia parameter...
CVE-2026-38064
Tenda 5G03 V05.03.02.04 Version 1.0 is vulnerable to Command injection in the function actiondialcall via the dialNumber parameter...
CVE-2026-38065
Tenda 5G03 V05.03.02.04 Version 1.0 is vulnerable to Command injection in the function actionimsonwithapn via the imsapn parameter...
CVE-2026-38064
Tenda 5G03 version V05.03.02.04 (Version 1.0) is susceptible to a Command injection vulnerability. The issue originates in the action_dial_call() function, where the dialNumber parameter is improperly neutralized, allowing for the execution of arbitrary OS commands. This vulnerability impacts the...
PT-2026-49294
Name of the Vulnerable Software and Affected Versions Tenda 5G03 version V05.03.02.04 Version 1.0 Description Command injection is possible in the action radio on with ia apn function through the ia parameter. Command injection is a flaw that allows an attacker to execute arbitrary operating syst...
CVE-2026-38063
The Tenda 5G03 firmware, specifically version V05.03.02.04 (Version 1.0) , is vulnerable to a Command injection flaw. The vulnerability exists within the action_radio_on_with_ia_apn() function due to the improper neutralization of special elements in the ia parameter. This flaw allows an attacker...
CVE-2026-38065
Tenda 5G03 V05.03.02.04 Version 1.0 is vulnerable to Command injection in the function actionimsonwithapn via the imsapn parameter...
CVE-2026-38060: Improper Neutralization of Special Elements used in an OS Command
Tenda 5G03 V05.03.02.04 Version 1.0 is vulnerable to Command injection in the function actionunlocksim via the pin parameter...
CVE-2026-38065
Tenda 5G03 V05.03.02.04 Version 1.0 is vulnerable to Command injection in the function actionimsonwithapn via the imsapn parameter...
CVE-2026-38062
The Tenda 5G03 router, specifically version V05.03.02.04 (Version 1.0) , is vulnerable to a Command injection flaw. The vulnerability exists in the action_set_rat_mode() function, where the ratMode parameter is improperly neutralized, allowing for the execution of arbitrary OS commands. This issu...
CVE-2026-38063
Tenda 5G03 V05.03.02.04 Version 1.0 is vulnerable to Command injection in the function actionradioonwithiaapn via the ia parameter...
CVE-2026-38064
Tenda 5G03 V05.03.02.04 Version 1.0 is vulnerable to Command injection in the function actiondialcall via the dialNumber parameter...
CVE-2026-38065
The Tenda 5G03 router, specifically version V05.03.02.04 (Version 1.0) , is vulnerable to Command injection . The flaw exists in the action_ims_on_with_apn() function due to the improper neutralization of special elements in the ims_apn parameter. This allows an attacker to execute arbitrary comm...
PT-2026-49295
Name of the Vulnerable Software and Affected Versions Tenda 5G03 version V05.03.02.04 Version 1.0 Description Command injection is possible in the action dial call function through the dialNumber parameter. Recommendations At the moment, there is no information about a newer version that contains...
CVE-2026-38064
Tenda 5G03 V05.03.02.04 Version 1.0 is vulnerable to Command injection in the function actiondialcall via the dialNumber parameter...
CVE-2026-38062
Tenda 5G03 V05.03.02.04 Version 1.0 is vulnerable to Command injection in the function actionsetratmode via the ratMode parameter...
PT-2026-49293
Name of the Vulnerable Software and Affected Versions Tenda 5G03 version V05.03.02.04 Version 1.0 Description Command injection is possible in the action set rat mode function through the ratMode parameter. Recommendations At the moment, there is no information about a newer version that contains...
CVE-2026-38065: Improper Neutralization of Special Elements used in an OS Command
Tenda 5G03 V05.03.02.04 Version 1.0 is vulnerable to Command injection in the function actionimsonwithapn via the imsapn parameter...
CVE-2026-38064: Improper Neutralization of Special Elements used in an OS Command
Tenda 5G03 V05.03.02.04 Version 1.0 is vulnerable to Command injection in the function actiondialcall via the dialNumber parameter...