by Kastro
Paper/Archive/CVE-2025-34149

CVE-2025-34149

Shenzhen Aitemi E Commerce Co. Ltd. M300 Wi-Fi Repeater — Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via WPA2 Key

EPSS 1%public exploitCVSS 9.4
critical.is priorityof 100
52
CVSS 9.4 (CNA)9.4 / 10 × 3028.2Not in CISA KEV+300.0EPSS percentile 70.0.700 × 2014.0Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

A command injection vulnerability affects the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) during WPA2 configuration. The 'key' parameter is interpreted directly by the system shell, enabling attackers to execute arbitrary commands as root. Exploitation requires no authentication and can be triggered during wireless setup.

Affected

ProductAffectedFixed inSource
M300 Wi-Fi Repeaterall versions–CNA

Scores by source

VulnCheck (CNA)9.4CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: total

References

exploitchocapikk.com/posts/2025/when-a-wifi-name-gives-you-root-part-tworefaliexpress.us/item/3256806767641280.htmlwriteupvulncheck.com/advisories/shenzhen-aitemi-m300-wifi-repeater-os-command-injection-via-wpa2-key