CVE-2025-34152 Scanner
CVE-2025-34152 Scanner - Remote Code Execution (RCE) vulnerability in Shenzhen Aitemi M300 Wi-Fi Repeater
Used 2.7k times · 3.3k assets checked · domain, subdomain, ipv4
CVE
CVE-2025-34152
9.4
CVSScritical
Exploitable from an adjacent network · no authentication required.
Description
An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) via the 'time' parameter of the '/protocol.csp?' endpoint. The input is processed by the internal date '-s' command without rebooting or disrupting HTTP service. Unlike other injection points, this vector allows remote compromise without triggering visible configuration changes.
Attack Vector
Adjacent
Privileges Req.
None
User Interaction
None
m300 wi-fi repeater
Updated Sep 28, 2026View on NVD →
S4E scanner
CVE history: m300 wi-fi repeater
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →