Threats tagged 'ghsa-xmrh-m77m-3pg7'

An unauthenticated OS command injection vulnerability affects the Shenzhen Aitemi M300 Wi-Fi Repeater (model MT02). The flaw occurs when the device is configured in Extender mode via its captive portal, where the extap2g SSID field is inserted without escaping into a reboot-time shell script. This allows remote attackers within Wi-Fi range to execute arbitrary commands as root during device reboot, resulting in full system compromise.