Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: Shenzhen Aitemi E Commerce Co. Ltd. Clear all filters
TI-2026-42066 CVE-2026-58457 · GHSA-gfhx-3hfg-x9hv

Shenzhen Aitemi M300 MT02 Unauthenticated OS Command Injection via protocol.csp

Priority HIGH 81

Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) contains an unauthenticated OS command injection vulnerability that allows network-adjacent attackers to execute arbitrary shell commands by injecting unsanitized…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02939 Published 2026-07-01 No fix listed CWE-78
TI-2025-24304 CVE-2025-34150 · GHSA-qfcv-8h57-gfr8

Shenzhen Aitemi M300 Wi-Fi Repeater PPPoE Username Command Injection

Priority HIGH 76

The PPPoE configuration interface of the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) is vulnerable to command injection via the 'user' parameter.

CVSS 4.0CRITICAL 9.4 Adjacent network No auth No interaction EPSS 0.01126 Published 2025-08-07 No fix listed CWE-78
TI-2025-24305 CVE-2025-34151 · GHSA-m653-46qf-v7xc

Shenzhen Aitemi M300 Wi-Fi Repeater PPPoE Password Command Injection

Priority MEDIUM 48

A command injection vulnerability exists in the 'passwd' parameter of the PPPoE setup process on the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02).

CVSS 4.0CRITICAL 9.4 Adjacent network No auth No interaction EPSS 0.03342 Published 2025-08-07 No fix listed CWE-78
TI-2025-24306 CVE-2025-34152 · GHSA-9r22-x3wm-vrr9

Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via Time Parameter

Priority HIGH 84

An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) via the 'time' parameter of the '/protocol.csp?' endpoint.

CVSS 4.0CRITICAL 9.4 Adjacent network No auth No interaction EPSS 0.83764 Published 2025-08-07 No fix listed CWE-78
TI-2025-24301 CVE-2025-34147 · GHSA-xmrh-m77m-3pg7

Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via SSID

Priority MEDIUM 44

An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02).

CVSS 4.0CRITICAL 9.4 Adjacent network No auth No interaction EPSS 0.0095 Published 2025-08-04 No fix listed CWE-78