Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via WPA2 Key
Priority HIGH 76CWE-78Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-78.
Summary
A command injection vulnerability affects the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) during WPA2 configuration. The 'key' parameter is interpreted directly by the system shell, enabling attackers to execute arbitrary commands as root. Exploitation requires no authentication and can be triggered during wireless setup.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.0128 70th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Shenzhen Aitemi E Commerce Co. Ltd. | M300 Wi-Fi Repeater | all versions | — | No fix listed | CNA |
- M300 Wi-Fi Repeater VendorShenzhen Aitemi E Commerce Co. Ltd. Affected all versions Fixed in — No fix listed CNA
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2025-34149
- 2026-10-03 Alias added: GHSA-wmgp-89hx-8225
References
More Shenzhen Aitemi E Commerce Co. Ltd. vulnerabilities
- TI-2025-24306 Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via Time Parameter CVSS 4.0CRITICAL 9.4
- TI-2026-42066 Shenzhen Aitemi M300 MT02 Unauthenticated OS Command Injection via protocol.csp CVSS 4.0CRITICAL 9.3
- TI-2025-24304 Shenzhen Aitemi M300 Wi-Fi Repeater PPPoE Username Command Injection CVSS 4.0CRITICAL 9.4
- TI-2025-24302 Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via WISP SSID CVSS 4.0CRITICAL 9.4
- TI-2025-24305 Shenzhen Aitemi M300 Wi-Fi Repeater PPPoE Password Command Injection CVSS 4.0CRITICAL 9.4
- TI-2025-24301 Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via SSID CVSS 4.0CRITICAL 9.4
Sources
- CVE-2025-34149 · CVE Program
- CVE-2025-34149 · NVD
- FIRST EPSS
- GHSA-wmgp-89hx-8225 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences