PT-2025-32277 · Aitemi · Aitemi M300 Wi-Fi Repeater
CVSS v4.0
9.4
Critical
| Vector | AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) (affected versions not specified)
Description
An unauthenticated OS command injection flaw exists where the system fails to neutralize special elements used in operating system commands. A remote attacker can exploit this by sending crafted input to the
time parameter of the '/protocol.csp?' endpoint. This input is processed by the internal date -s command, allowing for arbitrary code execution without rebooting the device or disrupting the HTTP service. This specific vector enables remote compromise without triggering visible changes to the device configuration.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Avoid using the
time parameter in the '/protocol.csp?' endpoint until the issue is resolved.Exploit
RCE
OS Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Aitemi M300 Wi-Fi Repeater