Read the docs

Shenzhen Aitemi E Commerce Co. Ltd.

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Shenzhen Aitemi E Commerce Co. Ltd. records in CISA KEV

No Shenzhen Aitemi E Commerce Co. Ltd. vulnerabilities are listed in CISA KEV.

Records

7 records

TI-2025-24306 CVE-2025-34152 · GHSA-9r22-x3wm-vrr9

Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via Time Parameter

Priority HIGH 84

An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) via the 'time' parameter of the '/protocol.csp?' endpoint.

CVSS 4.0CRITICAL 9.4 Adjacent network No auth No interaction EPSS 0.85349 Published 2025-08-07 No fix listed CWE-78
TI-2026-42066 CVE-2026-58457 · GHSA-gfhx-3hfg-x9hv

Shenzhen Aitemi M300 MT02 Unauthenticated OS Command Injection via protocol.csp

Priority HIGH 81

Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) contains an unauthenticated OS command injection vulnerability that allows network-adjacent attackers to execute arbitrary shell commands by injecting unsanitized…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02939 Published 2026-07-01 No fix listed CWE-78
TI-2025-24304 CVE-2025-34150 · GHSA-qfcv-8h57-gfr8

Shenzhen Aitemi M300 Wi-Fi Repeater PPPoE Username Command Injection

Priority HIGH 76

The PPPoE configuration interface of the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) is vulnerable to command injection via the 'user' parameter.

CVSS 4.0CRITICAL 9.4 Adjacent network No auth No interaction EPSS 0.01214 Published 2025-08-07 No fix listed CWE-78
TI-2025-24305 CVE-2025-34151 · GHSA-m653-46qf-v7xc

Shenzhen Aitemi M300 Wi-Fi Repeater PPPoE Password Command Injection

Priority MEDIUM 49

A command injection vulnerability exists in the 'passwd' parameter of the PPPoE setup process on the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02).

CVSS 4.0CRITICAL 9.4 Adjacent network No auth No interaction EPSS 0.036 Published 2025-08-07 No fix listed CWE-78
TI-2025-24301 CVE-2025-34147 · GHSA-xmrh-m77m-3pg7

Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via SSID

Priority MEDIUM 44

An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02).

CVSS 4.0CRITICAL 9.4 Adjacent network No auth No interaction EPSS 0.0095 Published 2025-08-04 No fix listed CWE-78
Open these records in search →