CVE-2025-34152— Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via Time Parameter
Quick assessment
Affected
Shenzhen Aitemi E Commerce Co. Ltd. M300 Wi-Fi Repeater
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Itemir M300 Wi-Fi Repeater是中国艾特米（Itemir）公司的一个无线中继器。 Itemir M300 Wi-Fi Repeater存在安全漏洞，该漏洞源于time参数未清理，可能导致未经验证的远程命令注入攻击。
Public Exploits 2
Metasploit · 1
aitemi_m300_time_rce.rb [exploit]
Nuclei · 1
CVE-2025-34152.yaml [template]
Possible ATT&CK Techniques 3 AI
T1203 · Exploitation for Client Execution T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-34152
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via Time Parameter
Source: CVE Program / CVE List V5
Vulnerability Description
An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) via the 'time' parameter of the '/protocol.csp?' endpoint. The input is processed by the internal date '-s' command without rebooting or disrupting HTTP service. Unlike other injection points, this vector allows remote compromise without triggering visible configuration changes.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Source: CVE Program / CVE List V5
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Source: CVE Program / CVE List V5
Vulnerability Title
Itemir M300 Wi-Fi Repeater 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Itemir M300 Wi-Fi Repeater是中国艾特米（Itemir）公司的一个无线中继器。 Itemir M300 Wi-Fi Repeater存在安全漏洞，该漏洞源于time参数未清理，可能导致未经验证的远程命令注入攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Shenzhen Aitemi E Commerce Co. Ltd. | M300 Wi-Fi Repeater | * | - |
|
II. Public POCs for CVE-2025-34152
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | Shenzhen Aitemi M300 Wi-Fi Repeater Unauthenticated RCE (CVE-2025-34152) | https://github.com/Chocapikk/CVE-2025-34152 | POC Details |
| 2 | An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) via the 'time' parameter of the '/protocol.csp?' endpoint. The input is processed by the internal date '-s' command without rebooting or disrupting HTTP service. Unlike other injection points, this vector allows remote compromise without triggering visible configuration changes. | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34152.yaml | POC Details |
| 3 | Shenzhen Aitemi M300 Wi-Fi Repeater Unauthenticated RCE (CVE-2025-34152) | https://github.com/kh4sh3i/CVE-2025-34152 | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-34152
请登录查看更多情报信息。
Security Blog Posts for CVE-2025-34152 (1)
-
🔗 When a Wi-Fi SSID Gives You Root on an MT02 Repeater – Part 2 | Chocapikk's Cybersecurity Blog 🛡️💻 Read full article technical-description exploit
Same Patch Batch · Shenzhen Aitemi E Commerce Co. Ltd. · 2025-08-07 · 5 CVEs total
| CVE-2025-34151 | Shenzhen Aitemi M300 Wi-Fi Repeater PPPoE Password Command Injection | |
| CVE-2025-34148 | Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via WISP SSID | |
| CVE-2025-34150 | Shenzhen Aitemi M300 Wi-Fi Repeater PPPoE Username Command Injection | |
| CVE-2025-34149 | Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via WPA2 Key |
IV. Related Vulnerabilities
Same product: M300 Wi-Fi Repeater
-
CVE-2026-19348
Shenzhen Aitemi M300 Wi-Fi Repeater protocol.csp sprintf com -
CVE-2026-58457
Shenzhen Aitemi M300 MT02 Unauthenticated OS Command Injecti -
CVE-2025-34148
Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via -
CVE-2025-34149
Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via -
CVE-2025-34150
Shenzhen Aitemi M300 Wi-Fi Repeater PPPoE Username Command I
Same vendor: Shenzhen Aitemi E Commerce Co. Ltd.
-
CVE-2026-58457
Shenzhen Aitemi M300 MT02 Unauthenticated OS Command Injecti -
CVE-2025-34148
Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via -
CVE-2025-34149
Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via -
CVE-2025-34150
Shenzhen Aitemi M300 Wi-Fi Repeater PPPoE Username Command I -
CVE-2025-34151
Shenzhen Aitemi M300 Wi-Fi Repeater PPPoE Password Command I
Same weakness: CWE-78
-
CVE-2026-63586
Unauthenticated Remote Code Execution via Shell Injection in -
CVE-2026-78430
sworddut mcp-ffmpeg-helper Tool handlers.ts handleToolCall o -
CVE-2026-78541
Command Injection in Parent Control of TP-Link Archer BE3600 -
CVE-2026-16348
Command Injection Vulnerability in VPN connection of Archer -
CVE-2026-9254
Command Injection Vulnerability in Parent Control of Multipl
V. Comments for CVE-2025-34152
No comments yet