This vulnerability is a command injection flaw in the CAte::HandleCmd function of the Kylin file in the ATE Module of several Tenda router models up to the 20260625 build. Remote attackers can exploit this weakness to execute arbitrary commands on affected devices without authentication or user interaction. The vulnerability affects multiple models including CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C, and TC3T15C. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, so remediation status is unknown.

Successful exploitation allows remote attackers to execute arbitrary commands on affected Tenda devices, potentially leading to full compromise of device confidentiality, integrity, and availability. This can result in unauthorized control over the device and disruption of network services.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to affected devices and monitor for unusual activity. Avoid exposing vulnerable devices directly to untrusted networks.