High severity8.8NVD Advisory· Published Dec 31, 2025· Updated Jun 17, 2026
CVE-2015-10145
CVE-2015-10145
Description
Gargoyle router management utility versions 1.5.x contain an authenticated OS command execution vulnerability in /utility/run_commands.sh. The application fails to properly restrict or validate input supplied via the 'commands' parameter, allowing an authenticated attacker to execute arbitrary shell commands on the underlying system. Successful exploitation may result in full compromise of the device, including unauthorized access to system files and execution of attacker-controlled commands.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Gargoyle/Gargoyle Router Management Utilityv5Range: 1.5.0
Patches
Vulnerability mechanics
References
4- blog.xlab.qianxin.com/large-scale-botnet-airashi-en/nvdExploitThird Party Advisory
- packetstorm.news/files/id/132149nvdExploit
- www.vulncheck.com/advisories/gargoyle-authenticated-os-command-execution-via-run-commands-shnvdThird Party Advisory
- www.gargoyle-router.comnvdProduct
News mentions
0No linked articles in our index yet.