PT-2025-32274 · Aitemi · Aitemi M300 Wi-Fi Repeater
CVSS v4.0
9.4
Critical
| Vector | AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H |
Name of the Vulnerable Software and Affected Versions
Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) (affected versions not specified)
Description
A command injection vulnerability exists during WPA2 configuration. The
key parameter is directly interpreted by the system shell, allowing attackers to execute arbitrary commands as root. Exploitation requires no authentication and can be triggered during wireless setup.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
OS Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Aitemi M300 Wi-Fi Repeater