Skip to content
OpenAdvisories

Vendor

Shenzhen Aitemi E Commerce

7 known vulnerabilities.

Products

M300 Wi-Fi Repeater 7
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-58457 Public exploit

    Shenzhen Aitemi M300 MT02 Unauthenticated OS Command Injection via protocol.csp

    Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) contains an unauthenticated OS command injection vulnerability that allows network-adjacent attackers to execute arbitrary shell commands by injecting unsanitized input through the smacfilter_conf hand…

    Shenzhen Aitemi E Commerce M300 Wi-Fi Repeater
  • Critical 9.4
    CVE-2025-34148

    Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via WISP SSID

    An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02). When configuring the device in WISP mode, the 'ssid' parameter is passed unsanitized to system-level scripts. This allows remote att…

    Shenzhen Aitemi E Commerce M300 Wi-Fi Repeater
  • Critical 9.4
    CVE-2025-34149

    Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via WPA2 Key

    A command injection vulnerability affects the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) during WPA2 configuration. The 'key' parameter is interpreted directly by the system shell, enabling attackers to execute arbitrary commands as root. Explo…

    Shenzhen Aitemi E Commerce M300 Wi-Fi Repeater
  • Critical 9.4
    CVE-2025-34150

    Shenzhen Aitemi M300 Wi-Fi Repeater PPPoE Username Command Injection

    The PPPoE configuration interface of the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) is vulnerable to command injection via the 'user' parameter. Input is processed unsafely during network setup, allowing attackers to execute arbitrary system co…

    Shenzhen Aitemi E Commerce M300 Wi-Fi Repeater
  • Critical 9.4
    CVE-2025-34151

    Shenzhen Aitemi M300 Wi-Fi Repeater PPPoE Password Command Injection

    A command injection vulnerability exists in the 'passwd' parameter of the PPPoE setup process on the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02). The input is passed directly to system-level commands without sanitation, enabling unauthenticated …

    Shenzhen Aitemi E Commerce M300 Wi-Fi Repeater
  • Critical 9.4
    CVE-2025-34152 Public exploit Scanner template EPSS 84%

    Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via Time Parameter

    An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) via the 'time' parameter of the '/protocol.csp?' endpoint. The input is processed by the internal date '-s' command without rebooting…

    Shenzhen Aitemi E Commerce M300 Wi-Fi Repeater
  • Critical 9.4
    CVE-2025-34147

    Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via SSID

    An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02). When configuring the device in Extender mode via its captive portal, the extap2g SSID field is inserted unescaped into a reboot-time…

    Shenzhen Aitemi E Commerce M300 Wi-Fi Repeater