ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in the ALGO 8180 IP Audio Alerter devices. This issue arises from the web-based user interface, where user-supplied strings are not properly validated before being used in system calls. As a result, authenticated attackers can execute arbitrary code on the affected device.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected device, with the executed code running in the device's context.

Remediation

The recommended mitigation strategy is to restrict interaction with the affected product.