ALGO 8180 IP Audio Alerter Ping Command Injection Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in the ALGO 8180 IP Audio Alerter. This issue arises from the web-based user interface, where user-supplied strings are not properly validated before being used in system calls. As a result, authenticated attackers can execute arbitrary code on the device.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected device, with the executed code running in the device's context.

Remediation

The recommended mitigation strategy is to limit interaction with the affected product.