M300 Wi-Fi Repeater vulnerabilities
7 known vulnerabilities in M300 Wi-Fi Repeater from Shenzhen Aitemi E Commerce. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
M300 Wi-Fi Repeater: Improper Neutralization of Special Elements used in an OS Command
Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) contains an unauthenticated OS command injection vulnerability that allows network-adjacent attackers to execute arbitrary shell commands by injecting unsanitized input through the smacfilter_conf handl
- 9.4 Critical severity
M300 Wi-Fi Repeater: Improper Neutralization of Special Elements used in an OS Command
An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) via the 'time' parameter of the '/protocol.csp?' endpoint. The input is processed by the internal date '-s' command without rebooting
- 9.4 Critical severity
M300 Wi-Fi Repeater: Improper Neutralization of Special Elements used in an OS Command
A command injection vulnerability exists in the 'passwd' parameter of the PPPoE setup process on the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02). The input is passed directly to system-level commands without sanitation, enabling unauthenticated a
- 9.4 Critical severity
M300 Wi-Fi Repeater: Improper Neutralization of Special Elements used in an OS Command
The PPPoE configuration interface of the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) is vulnerable to command injection via the 'user' parameter. Input is processed unsafely during network setup, allowing attackers to execute arbitrary system com
- 9.4 Critical severity
M300 Wi-Fi Repeater: Improper Neutralization of Special Elements used in an OS Command
A command injection vulnerability affects the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) during WPA2 configuration. The 'key' parameter is interpreted directly by the system shell, enabling attackers to execute arbitrary commands as root. Exploi
- 9.4 Critical severity
M300 Wi-Fi Repeater: Improper Neutralization of Special Elements used in an OS Command
An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02). When configuring the device in WISP mode, the 'ssid' parameter is passed unsanitized to system-level scripts. This allows remote atta
- 9.4 Critical severity
M300 Wi-Fi Repeater: Improper Neutralization of Special Elements used in an OS Command
An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02). When configuring the device in Extender mode via its captive portal, the extap2g SSID field is inserted unescaped into a reboot-time