CVE-2025-34147

An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02). When configuring the device in Extender mode via its captive portal, the extap2g SSID field is inserted unescaped into a reboot-time shell script. This allows remote attackers within Wi-Fi range to inject arbitrary shell commands that execute as root during device reboot, leading to full system compromise.

• CWE-78

• https://chocapikk.com/posts/2025/when-a-wifi-name-gives-you-root/
• https://www.aliexpress.us/item/3256806767641280.html
• https://www.vulncheck.com/advisories/shenzhen-aitemi-m300-wifi-repeater-os-command-injection-via-ssid

Published

Aug 4, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-34141A reflected cross-site scripting (XSS) vulnerability exists …5.1
• CVE-2025-34142An XML External Entity (XXE) injection vulnerability exists …6.9
• CVE-2025-34143An authentication bypass vulnerability exists in ETQ Relianc…9.3
• CVE-2025-34144Rejected reason: This CVE ID was rejected because it was res…
• CVE-2025-34145Rejected reason: This CVE ID was rejected because it was res…
• CVE-2025-34146A prototype pollution vulnerability exists in @nyariv/sandbo…7
• CVE-2025-34148An unauthenticated OS command injection vulnerability exists…9.4
• CVE-2025-34149A command injection vulnerability affects the Shenzhen Aitem…9.4
• CVE-2025-3415Grafana is an open-source platform for monitoring and observ…4.3
• CVE-2025-34150The PPPoE configuration interface of the Shenzhen Aitemi M30…9.4
• CVE-2025-34151A command injection vulnerability exists in the 'passwd' par…9.4
• CVE-2025-34152An unauthenticated OS command injection vulnerability exists…9.4