Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 8

Export CSV
CVE-2026-19348

Shenzhen Aitemi M300 Wi-Fi Repeater protocol.csp sprintf command injection

A security flaw has been discovered in Shenzhen Aitemi M300 Wi-Fi Repeater r0-ea7890a. Impacted is the function sprintf of the file /protocol.csp?fname=net&opt=smacfilter_conf&function=set&act=add&name=test&enable=1. Performing a manipulation of the argument enable/name/mac results in command injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.

CVSS 4.0 · 9.3 Critical EPSS 3.6% KEV · Not listed
Vendors
Shenzhen Aitemi
Products
M300 Wi-fi Repeater M300 Wifi Repeater
CVE-2026-58457

Shenzhen Aitemi M300 MT02 Unauthenticated OS Command Injection via protocol.csp

Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) contains an unauthenticated OS command injection vulnerability that allows network-adjacent attackers to execute arbitrary shell commands by injecting unsanitized input through the smacfilter_conf handler in the commuos web backend. Attackers can append semicolon-delimited payloads to the name, enable, or mac GET parameters, which are passed without sanitization into sprintf() to build uci shell commands executed via doSystemCmdComlib(), granting full root-level control of the device.

CVSS 4.0 · 9.3 Critical EPSS 2.9% KEV · Not listed
Vendors
Shenzhen Aitemi
Products
M300 Wifi Repeater
CVE-2025-34149

Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via WPA2 Key

A command injection vulnerability affects the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) during WPA2 configuration. The 'key' parameter is interpreted directly by the system shell, enabling attackers to execute arbitrary commands as root. Exploitation requires no authentication and can be triggered during wireless setup.

CVSS 4.0 · 9.4 Critical EPSS 1.2% KEV · Not listed
Vendors
Shenzhen Aitemi
Products
M300 M300 Wifi Repeater
CVE-2025-34150

Shenzhen Aitemi M300 Wi-Fi Repeater PPPoE Username Command Injection

The PPPoE configuration interface of the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) is vulnerable to command injection via the 'user' parameter. Input is processed unsafely during network setup, allowing attackers to execute arbitrary system commands with root privileges.

CVSS 4.0 · 9.4 Critical EPSS 1.1% KEV · Not listed
Vendors
Shenzhen Aitemi
Products
M300 M300 Wifi Repeater
CVE-2025-34147

Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via SSID

An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02). When configuring the device in Extender mode via its captive portal, the extap2g SSID field is inserted unescaped into a reboot-time shell script. This allows remote attackers within Wi-Fi range to inject arbitrary shell commands that execute as root during device reboot, leading to full system compromise.

CVSS 4.0 · 9.4 Critical EPSS < 1% KEV · Not listed
Vendors
Shenzhen Aitemi
Products
M300 Wifi Repeater
CVE-2025-34152

Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via Time Parameter

An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) via the 'time' parameter of the '/protocol.csp?' endpoint. The input is processed by the internal date '-s' command without rebooting or disrupting HTTP service. Unlike other injection points, this vector allows remote compromise without triggering visible configuration changes.

CVSS 4.0 · 9.4 Critical EPSS 83.8% KEV · Not listed
Vendors
Shenzhen Aitemi
Products
M300 M300 Wifi Repeater
CVE-2025-34151

Shenzhen Aitemi M300 Wi-Fi Repeater PPPoE Password Command Injection

A command injection vulnerability exists in the 'passwd' parameter of the PPPoE setup process on the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02). The input is passed directly to system-level commands without sanitation, enabling unauthenticated attackers to achieve root-level code execution.

CVSS 4.0 · 9.4 Critical EPSS 3.3% KEV · Not listed
Vendors
Shenzhen Aitemi
Products
M300 M300 Wifi Repeater
CVE-2025-34148

Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via WISP SSID

An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02). When configuring the device in WISP mode, the 'ssid' parameter is passed unsanitized to system-level scripts. This allows remote attackers within Wi-Fi range to inject arbitrary shell commands that execute as root, resulting in full device compromise.

CVSS 4.0 · 9.4 Critical EPSS 1.1% KEV · Not listed
Vendors
Shenzhen Aitemi
Products
M300 M300 Wifi Repeater