ALGO 8180 IP Audio Alerter API Command Injection Remote Code Execution Vulnerability

A command injection vulnerability allowing remote code execution has been identified in ALGO 8180 IP Audio Alerter devices. This issue arises from the API interface's failure to properly validate user-supplied strings before using them in system calls. As a result, authenticated attackers can execute arbitrary code in the context of the affected device.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected device.

Remediation

The recommended mitigation strategy is to restrict interaction with the affected product.