A security vulnerability has been detected in Tenda G103 1.0.0.5. The affected element is the function action_set_system_settings of the file system.lua of the component Setting Handler. Such manipulation of the argument lanIp leads to command injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.
References
| Link | Resource |
|---|---|
| https://github.com/ZZ2266/.github.io/tree/main/Tenda%20G103/action_set_system_settings | Exploit Third Party Advisory |
| https://vuldb.com/submit/781131 | Third Party Advisory VDB Entry |
| https://vuldb.com/vuln/354669 | Third Party Advisory VDB Entry |
| https://vuldb.com/vuln/354669/cti | Permissions Required VDB Entry |
| https://www.tenda.com.cn/ | Product |
Configurations
Configuration 1 (hide)
| AND |
|
History
07 Apr 2026, 15:42
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/ZZ2266/.github.io/tree/main/Tenda%20G103/action_set_system_settings - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/submit/781131 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/vuln/354669 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/vuln/354669/cti - Permissions Required, VDB Entry | |
| References | () https://www.tenda.com.cn/ - Product | |
| First Time |
Tenda
Tenda g103 Tenda g103 Firmware |
|
| CPE | cpe:2.3:h:tenda:g103:-:*:*:*:*:*:*:* cpe:2.3:o:tenda:g103_firmware:1.0.0.5:*:*:*:*:*:*:* |
02 Apr 2026, 14:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-04-02 14:16
Updated : 2026-04-29 01:00
NVD link : CVE-2026-5338
Mitre link : CVE-2026-5338
CVE.ORG link : CVE-2026-5338
JSON object : View
Products Affected
tenda
- g103_firmware
- g103