CyberRota Analysis
This vulnerability has an unknown severity rating. Its EPSS score suggests a 60.9% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2025-34152
Severity
UNKNOWN
CVSS
N/A
EPSS
60.88%
Original NVD Description
An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) via the 'time' parameter of the '/protocol.csp?' endpoint. The input is processed by the internal date '-s' command without rebooting or disrupting HTTP service. Unlike other injection points, this vector allows remote compromise without triggering visible configuration changes.