ALGO 8180 IP Audio Alerter Web UI Persistent Cross-Site Scripting Vulnerability

A persistent cross-site scripting vulnerability has been identified in the web user interface of ALGO 8180 IP Audio Alerter devices. This vulnerability allows remote attackers to execute web requests with the privileges of the affected user. The issue arises from inadequate validation of user-supplied data in the syslog viewing functionality, enabling the injection of arbitrary scripts. Notably, authentication is not required to exploit this vulnerability.

Impact

Exploitation of this vulnerability allows for persistent cross-site scripting, where injected scripts are executed in the context of the user.

Remediation

The recommended mitigation strategy is to limit interactions with the affected product.