The Tenda 5G03 device running version V05.03.02.04 (Version 1.0) is affected by a command injection vulnerability in the function action_ims_on_with_apn. The vulnerability is triggered via the ims_apn parameter, which does not properly sanitize input, allowing an attacker to execute arbitrary commands on the device. There is no CVSS score or detailed exploit information available, and no known exploits in the wild have been reported. No patch or remediation level has been provided by the vendor or advisory sources.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the affected device, potentially leading to unauthorized control, data compromise, or disruption of device functionality. The exact impact depends on the attacker's ability to reach and exploit the vulnerable parameter.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the vulnerable device and monitor for suspicious activity related to the ims_apn parameter. Avoid exposing the device's management interfaces to untrusted networks.