The Tenda 5G03 device running firmware version V05.03.02.04 (Version 1.0) is affected by a command injection vulnerability in the action_set_volume function. The vulnerability is triggered via the volume parameter, which is not properly sanitized, allowing an attacker to inject and execute arbitrary commands on the device. No CVSS score or detailed impact metrics are provided, and no official remediation or patch information is available from the vendor or advisory sources.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the affected device, potentially leading to unauthorized control or disruption of device functionality. The exact impact depends on the attacker's ability to exploit the volume parameter and the privileges of the executed commands. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid exposing the vulnerable interface to untrusted networks and restrict access to trusted users only.