A critical command injection vulnerability in the Shenzhen Aitemi M300 Wi-Fi Repeater allows for unauthenticated remote code execution, posing a severe risk to network integrity.

This is a command injection flaw (CWE-77) triggered by improper handling of input parameters within the sprintf function in the device web interface. The vulnerability is exploitable by an unauthenticated remote attacker.

Successful exploitation grants an attacker full control over the affected Wi-Fi repeater, which can be used as a foothold to pivot into internal network segments. Given the CVSS score of 9.8, this vulnerability represents a critical risk that could lead to complete system compromise, unauthorized data access, and potential denial of service for connected clients.

Immediate Action: Update the Shenzhen Aitemi M300 Wi-Fi Repeater to the latest firmware version provided by the manufacturer.

Proactive Monitoring: Inspect network traffic for suspicious requests directed at the /protocol.csp endpoint and monitor system logs for signs of unauthorized command execution.

Compensating Controls: Restrict access to the management interface of the repeater to trusted internal IP addresses using firewall rules or VLAN segmentation.

Public Exploit Available: Yes, a public proof of concept is available via the referenced GitHub repository.

The critical nature of this vulnerability, combined with the availability of public exploit code, necessitates immediate remediation. Administrators should prioritize patching all affected devices and ensure that management interfaces are not exposed to the public internet to prevent unauthorized access.