Shenzhen Aitemi M300 Wi-Fi Repeater is affected by an unauthenticated remote code execution (RCE).
- No login required
- Does not reboot the device
- Can be exploited remotely
| Version | Status |
|---|---|
| 1.0.x | ❌ Vulnerable |
| 1.1.x | ❌ Vulnerable |
| 1.2.x | ❌ Vulnerable |
| 2.0.x |
- Update to the latest firmware from vendor
- Restrict management interface access (LAN only)
- Enable firewall rules to block WAN access
- Monitor logs for suspicious requests
⚠️ Do not use on public devices, only in a controlled lab environment.
go run CVE-2025-34152.go- CVE Details
- Vendor Advisory: Shenzhen Aitemi official site
- Exploit analysis: Security blogs