M300 Wi Fi Repeater
Approved changes feed: RSS · Atom
cpe:2.3:a:shenzhen_aitemi_e_commerce_co._ltd.:m300_wi-fi_repeater:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Shenzhen Aitemi E Commerce Co. Ltd. (6158e35e-425f-5a38-8577-54c7eca4e2a2) |
|---|---|
| Product | M300 Wi Fi Repeater (c7da64c3-d362-5f57-be30-923919c6145b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-58457 |
vulnerable | 2026-07-29 01:03:16.824559 |
Shenzhen Aitemi M300 MT02 Unauthenticated OS Command Injection via protocol.csp
CRITICAL (9.8)
Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) contains an unauthenticated OS command injection vulnerability that allows network-adjacent attackers to execute arbitrary shell commands by injecting unsanitized input through the smacfilter_conf handler in the commuos web backend. Attackers can append semicolon-delimited payloads to the name, enable, or mac GET parameters, which are passed without sanitization into sprintf() to build uci shell commands executed via doSystemCmdComlib(), granting full root-level control of the device.
Published: 2026-07-01T19:22:42.559Z
Updated: 2026-07-06T14:01:11.887Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-34152 |
vulnerable | 2026-06-08 07:19:02.287117 |
Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via Time Parameter
An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) via the 'time' parameter of the '/protocol.csp?' endpoint. The input is processed by the internal date '-s' command without rebooting or disrupting HTTP service. Unlike other injection points, this vector allows remote compromise without triggering visible configuration changes.
Published: 2025-08-07T16:44:59.919Z
Updated: 2025-12-01T16:32:10.204Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-34151 |
vulnerable | 2026-06-08 07:19:02.286553 |
Shenzhen Aitemi M300 Wi-Fi Repeater PPPoE Password Command Injection
A command injection vulnerability exists in the 'passwd' parameter of the PPPoE setup process on the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02). The input is passed directly to system-level commands without sanitation, enabling unauthenticated attackers to achieve root-level code execution.
Published: 2025-08-07T16:45:06.189Z
Updated: 2025-12-01T16:31:46.354Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-34150 |
vulnerable | 2026-06-08 07:19:02.286200 |
Shenzhen Aitemi M300 Wi-Fi Repeater PPPoE Username Command Injection
The PPPoE configuration interface of the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) is vulnerable to command injection via the 'user' parameter. Input is processed unsafely during network setup, allowing attackers to execute arbitrary system commands with root privileges.
Published: 2025-08-07T16:45:11.991Z
Updated: 2025-12-01T16:31:19.693Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-34149 |
vulnerable | 2026-06-08 07:19:02.285718 |
Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via WPA2 Key
A command injection vulnerability affects the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) during WPA2 configuration. The 'key' parameter is interpreted directly by the system shell, enabling attackers to execute arbitrary commands as root. Exploitation requires no authentication and can be triggered during wireless setup.
Published: 2025-08-07T16:45:18.731Z
Updated: 2025-12-01T16:30:54.064Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-34148 |
vulnerable | 2026-06-08 07:19:02.284179 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-34147 |
vulnerable | 2026-06-08 07:19:02.283786 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.