CVE-2025-34149

Deeper analysis

A command injection vulnerability affects the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) during WPA2 configuration. The 'key' parameter is interpreted directly by the system shell, enabling attackers to execute arbitrary commands as root. Exploitation requires no authentication and can be triggered during wireless setup. The flaw is tracked as CWE-78 and carries a CVSS 4.0 score of 9.4.

An attacker within wireless range can supply a malicious WPA2 key value during device setup to obtain unauthenticated root command execution on the repeater. This grants full control over the device without any prior credentials or user interaction.

Public references, including a detailed analysis from Chocapikk and an advisory from VulnCheck, document the issue and point to the affected hardware sold through channels such as AliExpress; no vendor-supplied patches or configuration workarounds are described in the available references.

EPSS for the CVE rose from a low baseline to a peak of 0.0161 on 2025-12-11 before receding to the current value of 0.0051, indicating a temporary increase in exploitation interest several months after the August 2025 disclosure.