Description
深圳艾特米M300Wi-Fi 中继器存在远程命令执行漏洞。攻击者可以通过向/protocol.csp接口发送特制的请求，利用该漏洞执行任意系统命令，可能导致设备被完全控制，进而造成敏感信息泄露、服务中断等严重后果。
深圳艾特米M300Wi-Fi 中继器 /protocol.csp 命令执行漏洞（CVE-2025-34152）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-34152
https://gist.github.com/Chocapikk/016bdf727a71af36b800b4da0e84b85a
https://chocapikk.com/posts/2025/when-a-wifi-name-gives-you-root-part-two/
https://www.vulncheck.com/advisories/shenzhen-aitemi-m300-wifi-repeater-os-command-injection-via-time-parameter
https://github.com/kh4sh3i/CVE-2025-34152
https://attackerkb.com/topics/vOQYG5Nn7Y/cve-2025-34152
https://www.sentinelone.com/vulnerability-database/cve-2025-34152/
https://sploitus.com/exploit?id=MSF:EXPLOIT-LINUX-HTTP-AITEMI_M300_TIME_RCE-
https://pentest-tools.com/vulnerabilities-exploits/shenzhen-aitemi-m300-wi-fi-repeater-unauthenticated-remote-command-execution-via-time-parameter_27549
https://advisories.checkpoint.com/defense/advisories/public/2025/cpai-2025-7408.html/