What security risks should be considered before enabling SMS commands on a router?

Risks include spoofed or forwarded messages, lost phones, shared credentials and commands sent to the wrong device. Restrict accepted sender numbers if supported, use command passwords or tokens, change defaults and keep the allowed command set as small as possible.

Do not include sensitive information in reply messages, and consider whether a phone number alone is an adequate identity for the action involved. Log commands and alert on failed attempts. For high-consequence operations, SMS should trigger a controlled request or alarm rather than directly operating equipment without independent safeguards.