The Tenda 5G03 device, version V05.03.02.04 (1.0), is affected by a command injection vulnerability in the action_dial_call function. The vulnerability arises from improper input validation of the dialNumber parameter, which can be exploited to execute arbitrary commands on the device. The CVE entry does not provide a CVSS score or remediation details, and no exploits have been reported in the wild.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the affected device, potentially leading to unauthorized control or disruption of device functionality. The exact impact depends on the attacker's ability to leverage the command injection in the specific environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should monitor vendor communications for updates and consider limiting access to the vulnerable function or device to trusted users only.