Skip to main content

CISA issues advisory on Tenda router command injection vulnerabilities

Source Decision Insights Threat Desk Published November 27, 2025 Companies 1
Human View Machine View

346th article in the last 90 days, one of 457 articles referencing Cybersecurity and Infrastructure Security Agency (CISA). Previous coverage: CISA issues alert on AVEVA Application Server IDE vulnerability (Nov 2025).

Companies mentioned

Best suited for

Persona
Security Operations Leader
Decision stage
Which to buy
Adoption curve
Early Majority
Industry
Information Technology / Technology Hardware & Equipment / Communications Equipment / Communications

Our classification, not the publisher's statement. Best suited for, not only for.

Multiple firmware versions of the Tenda N300 series and Tenda 4G03 Pro routers contain command injection vulnerabilities that allow attackers to execute arbitrary commands with root privileges on affected devices.

The vulnerabilities include CVE-2025-13207 affecting firmware versions up to and including v04.03.01.44 in the /usr/sbin/httpd service, which can be exploited via a crafted, authenticated Hypertext Transfer Protocol (HTTP) request to Transmission Control Protocol (TCP) port 80. Additionally, CVE-2024-24481 impacts firmware versions up to and including v04.03.01.14, involving improper input validation in a web interface function accessible through TCP port 7329; this issue is separate from CVE-2023-2649. Both vulnerabilities were discovered through firmware reverse engineering. Affected devices include the Tenda 4G03 Pro, a portable 4G Long Term Evolution (LTE) router designed for flexible internet access using a Subscriber Identity Module (SIM) card.

Exploitation of these vulnerabilities permits an attacker to run arbitrary commands as root on the underlying Operating System (OS), effectively granting full control over the device.

The Computer Emergency Readiness Team (CERT) Coordination Center has not identified any vendor-supplied patches or mitigations addressing these vulnerabilities at this time.

Users dependent on these devices for security-sensitive operations are advised to consider alternative hardware options. If replacement is not immediately feasible, limiting device exposure may reduce potential misuse. Users should monitor for firmware updates or advisories from Tenda for any future patches.

Blog post, originally published by Marisa Middler and Timur Snoke at kb.cert.org.

Mentions

Structured data (JSON-LD)

The schema.org markup this page publishes for search engines and AI agents, exactly as they read it.

[
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#website",
    "@type": "WebSite",
    "name": "Decision Insights",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}&submit=1"
      }
    },
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#organization",
    "@type": "Organization",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "[email protected]"
    },
    "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
    "logo": {
      "@type": "ImageObject",
      "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
    },
    "name": "Decision Insights",
    "parentOrganization": {
      "@type": "Organization",
      "name": "Wiretap Labs",
      "sameAs": [
        "https://www.linkedin.com/company/wiretap-labs",
        "https://www.crunchbase.com/organization/wiretap-labs"
      ],
      "url": "https://wiretaplabs.com"
    },
    "publishingPrinciples": "https://decisioninsights.ai/standards/",
    "sameAs": [
      "https://www.linkedin.com/company/decisioninsights"
    ],
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai",
        "name": "Decision Insights",
        "position": 1
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/records/",
        "name": "Records",
        "position": 2
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/cisa-issues-advisory-on-tenda-router-command-injection-vulnerabilities/",
        "name": "CISA issues advisory on Tenda router command injection vulnerabilities",
        "position": 3
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/cisa-issues-advisory-on-tenda-router-command-injection-vulnerabilities/#blogposting",
    "@type": "BlogPosting",
    "about": {
      "@type": "Organization",
      "name": "Tenda"
    },
    "audience": [
      {
        "@type": "Audience",
        "additionalType": "Persona",
        "audienceType": "Security Operations Leader"
      },
      {
        "@type": "Audience",
        "additionalType": "Adoption curve",
        "audienceType": "Early Majority"
      },
      {
        "@type": "Audience",
        "additionalType": "Industry",
        "audienceType": "Information Technology / Technology Hardware & Equipment / Communications Equipment / Communications"
      }
    ],
    "author": {
      "@id": "https://decisioninsights.ai/author/decision-insights-threat-desk/#person",
      "@type": "Person",
      "name": "Decision Insights Threat Desk",
      "url": "https://decisioninsights.ai/author/decision-insights-threat-desk/"
    },
    "dateModified": "2026-08-23T13:08:30-06:00",
    "datePublished": "2025-11-27T13:42:34-07:00",
    "description": "CISA reports command injection vulnerabilities in Tenda N300 and 4G03 Pro routers allowing root access; no current fixes available.",
    "headline": "CISA issues advisory on Tenda router command injection vulnerabilities",
    "isBasedOn": {
      "@type": "CreativeWork",
      "author": {
        "@type": "Person",
        "name": "Marisa Middler and Timur Snoke"
      },
      "sourceOrganization": {
        "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
        "name": "Department of Homeland Security"
      },
      "url": "https://kb.cert.org/vuls/id/268029"
    },
    "keywords": [
      "Computer Emergency Readiness Team",
      "Firmware",
      "Operating System",
      "Router",
      "Subscriber Identity Module",
      "Transmission Control Protocol",
      "Vulnerabilities"
    ],
    "mainEntityOfPage": {
      "@id": "https://decisioninsights.ai/cisa-issues-advisory-on-tenda-router-command-injection-vulnerabilities/",
      "@type": "WebPage",
      "sdDatePublished": "2026-08-23",
      "sdPublisher": {
        "@id": "https://decisioninsights.ai/#organization"
      }
    },
    "mentions": [
      {
        "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/",
        "name": "Cybersecurity and Infrastructure Security Agency (CISA)"
      },
      {
        "@id": "https://decisioninsights.ai/projects/evolution/#project",
        "@type": "SoftwareSourceCode",
        "mainEntityOfPage": "https://decisioninsights.ai/projects/evolution/",
        "name": "Evolution"
      }
    ],
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    }
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/author/decision-insights-threat-desk/#person",
    "@type": "Person",
    "description": "CISA advisories, vendor security bulletins, and CVE disclosures, summarized into sourced briefs. Produced under our Standards & Methodology.",
    "name": "Decision Insights Threat Desk",
    "sameAs": [
      "https://www.linkedin.com/showcase/decisioninsights/"
    ],
    "url": "https://decisioninsights.ai/author/decision-insights-threat-desk/"
  }
]

Is this your company? Get structured data for your own pages