Threats tagged 'ghsa-qfxm-2vvw-gwhp'

An unauthenticated OS command injection vulnerability affects the Shenzhen Aitemi M300 Wi-Fi Repeater (model MT02) when configured in WISP mode. The vulnerability arises because the 'ssid' parameter is passed without sanitization to system-level scripts, allowing remote attackers within Wi-Fi range to execute arbitrary shell commands as root. This leads to full device compromise. The vulnerability has a critical severity with a CVSS 4.0 score of 9.4. No patch or remediation information is currently provided.