CVE-2015-10145

HighCVSS 8.8/10Last modified Sep 23, 2026

Description

Gargoyle router management utility versions 1.5.x contain an authenticated OS command execution vulnerability in /utility/run_commands.sh. The application fails to properly restrict or validate input supplied via the 'commands' parameter, allowing an authenticated attacker to execute arbitrary shell commands on the underlying system. Successful exploitation may result in full compromise of the device, including unauthorized access to system files and execution of attacker-controlled commands.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

Vendor	Product	Versions
Gargoyle	Gargoyle Router Management Utility	1.5.0

References

https://blog.xlab.qianxin.com/large-scale-botnet-airashi-en/Exploit, Third Party Advisory
https://packetstorm.news/files/id/132149Exploit
https://www.gargoyle-router.com/Product
https://www.vulncheck.com/advisories/gargoyle-authenticated-os-command-execution-via-run-commands-shThird Party Advisory
https://blog.xlab.qianxin.com/large-scale-botnet-airashi-en/Exploit, Third Party Advisory

Timeline

Published: Dec 31, 2025
Last modified: Sep 23, 2026
NVD status: Analyzed

Related CVEs from 2015

CVE-2015-101464.9The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and inc CVE-2015-101474.9The Easy Testimonial Slider and Form plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and i CVE-2015-101488.2Hirschmann HiLCOS devices OpenBAT, WLC, BAT300, BAT54 prior to 8.80 and OpenBAT prior to 9.10 are shipped with identical default SSH and SSL CVE-2015-10152.1Omron CX-One CX-Programmer before 9.6, CJ2M PLC devices before 2.1, and CJ2H PLC devices before 1.5 use a reversible format for password sto CVE-2015-10264.3Multiple cross-site scripting (XSS) vulnerabilities in ZOHO ManageEngine ADManager Plus before 6.2 Build 6270 allow remote attackers to inje CVE-2015-10275.9The version checking subroutine in percona-toolkit before 2.2.13 and xtrabackup before 2.2.9 was vulnerable to silent HTTP downgrade attacks CVE-2015-10283.5Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2730B router (rev C1) with firmware GE_1.01 allow remote authenticated use CVE-2015-10296.5The puppetlabs-stdlib module 2.1 through 3.0 and 4.1.0 through 4.5.x before 4.5.1 for Puppet 2.8.8 and earlier allows remote authenticated u CVE-2015-10305.0Memory leak in the rfc2553_connect_to function in jbsocket.c in Privoxy before 3.0.22 allows remote attackers to cause a denial of service (CVE-2015-10317.5Multiple use-after-free vulnerabilities in Privoxy before 3.0.22 allow remote attackers to have unspecified impact via vectors related to (1 CVE-2015-10324.3Cross-site scripting (XSS) vulnerability in Kiwix before 0.9.1, when using kiwix-serve, allows remote attackers to inject arbitrary web scri CVE-2015-10385.8p7zip 9.20.1 allows remote attackers to write to arbitrary files via a symlink attack in an archive.