Shenzhen Aitemi M300 Wi-Fi Repeater Command Injection Vulnerability

A command injection vulnerability has been identified in the Shenzhen Aitemi M300 Wi-Fi Repeater, specifically in hardware model MT02. This vulnerability arises during the WPA2 configuration process, where the 'key' parameter is directly interpreted by the system shell. As a result, attackers can execute arbitrary commands with root privileges. The exploitation of this vulnerability does not require authentication and can be triggered during the wireless setup phase.

Impact

Exploitation of this vulnerability allows for unauthorized command execution as the root user on the affected device.

Reproduction

The vulnerability can be reproduced by injecting shell commands into the 'key' parameter while configuring WPA2 settings on the repeater. This can be done through the device's web interface, which is accessible without authentication.