ALGO 8180 IP Audio Alerter SCI Command Injection Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in ALGO 8180 IP Audio Alerter devices. This issue arises from the SCI module's failure to properly validate user-supplied strings before using them to execute system calls, allowing authenticated attackers to execute arbitrary code on the device.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected device, with the executed code running in the device's context.

Remediation

The recommended mitigation strategy is to limit interaction with the affected product.