CVE-2025-34152

This Go-based exploit targets an unauthenticated RCE vulnerability in Shenzhen Aitemi M300 Wi-Fi Repeater by injecting a reverse shell payload via the 'time' parameter in a POST request to '/protocol.csp'. The payload uses a named pipe and netcat to establish a reverse shell.

This Go-based exploit targets an unauthenticated RCE vulnerability in Shenzhen Aitemi M300 Wi-Fi Repeaters (CVE-2025-34152). It leverages command injection via the `protocol.csp` endpoint to spawn a reverse shell using `nc` and a named pipe.

This Metasploit module exploits an unauthenticated remote command injection vulnerability in the Shenzhen Aitemi M300 Wi-Fi Repeater. The vulnerability is in the 'time' parameter of the time configuration endpoint, which is passed unsanitized to a shell command executed via the `date -s` mechanism, allowing root-level command execution.