This vulnerability in Tenda 4G03 Pro firmware versions up to 1.0/1.1/04.03.01.53 is caused by improper access controls in an unspecified function of the /bin/httpd binary. The flaw allows unauthenticated remote attackers to manipulate access controls, potentially leading to unauthorized actions. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, and low to low impact on confidentiality, integrity, and availability. No official fix or mitigation has been published by the vendor, and the exploit code is publicly available.

The vulnerability allows remote unauthenticated attackers to bypass access controls on the affected Tenda 4G03 Pro devices. This could lead to unauthorized access or actions on the device, potentially compromising device security or network integrity. The CVSS score of 6.9 reflects a medium severity impact. No specific details on the exact consequences or extent of compromise are provided.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor Tenda's official channels for updates. Until a patch is available, consider restricting remote access to the device's management interface and applying network-level controls to limit exposure. Avoid exposing the device's management interface to untrusted networks.