CRITICAL CWE-78
CVE-2025-34152
Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via Time Parameter
Shenzhen Aitemi E Commerce·M300 Wi-Fi Repeater
9.4/ 10
CVSS 4.0
Critical severity
84%
EPSS exploit odds
Chance of exploitation in the next 30 days
Higher than 99.7% of all CVEs
Not listed
CISA KEV catalog
No confirmed in-the-wild exploitation on CISA's list.
Timeline
- Published
- Aug 7, 2025
- Updated
- Dec 1, 2025
- First covered
- Jul 27, 2026
- Latest story
- 4 months ago
Summary
An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) via the 'time' parameter of the '/protocol.csp?' endpoint. The input is processed by the internal date '-s' command without rebooting or disrupting HTTP service. Unlike other injection points, this vector allows remote compromise without triggering visible configuration changes.
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Attack profile
Attack vectorAdjacent
ComplexityLow
RequirementsNone
PrivilegesNone
User interactionNone
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:HAffected products
- Shenzhen Aitemi E Commerce M300 Wi-Fi Repeater