This vulnerability in Tenda 4G03 Pro firmware versions up to 1.0/1.1/04.03.01.53 relates to improper access controls in an unspecified function of the /bin/httpd binary. The flaw allows remote attackers to potentially bypass access restrictions without requiring privileges or user interaction. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges or user interaction needed, and low impact on confidentiality, integrity, and availability. The vulnerability is publicly disclosed but lacks vendor-provided remediation guidance.

Successful exploitation could allow remote attackers to bypass access controls on the affected device, potentially leading to unauthorized access or control over certain device functions. The impact on confidentiality, integrity, and availability is rated as low, consistent with the CVSS score of 6.9 (medium severity). No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific mitigations are provided by the vendor at this time.