ALGO 8180 IP Audio Alerter SIP INVITE Alert-Info Stack-based Buffer Overflow Remote Code Execution Vulnerability

A stack-based buffer overflow vulnerability allowing remote code execution has been identified in the ALGO 8180 IP Audio Alerter. This issue arises from improper validation of the Alert-Info header in SIP INVITE requests, which allows attackers to exploit the vulnerability without authentication. The flaw enables arbitrary code execution on the affected device.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected device, with the executed code running in the device's context.

Remediation

The recommended mitigation strategy is to restrict interaction with the affected product.