Gargoyle 1.5.x Authenticated OS Command Execution via run_commands.sh

Gargoyle router management utility versions 1.5.x contain an authenticated OS command execution vulnerability in /utility/run_commands.sh. The application fails to properly restrict or validate input supplied via the 'commands' parameter, allowing an authenticated attacker to execute arbitrary shell commands on the underlying system. Successful exploitation may result in full compromise of the device, including unauthorized access to system files and execution of attacker-controlled commands.

N/A

OS命令中使用的特殊元素转义处理不恰当(OS命令注入)

Gargoyle Router Management Utility 安全漏洞

Gargoyle Router Management Utility是Gargoyle公司的一个第三方路由器固件。 Gargoyle Router Management Utility 1.5.x版本存在安全漏洞，该漏洞源于对commands参数输入限制或验证不足，可能导致经过身份验证的攻击者执行任意操作系统命令。

N/A

N/A