ALGO 8180 IP Audio Alerter SIP Use-After-Free Remote Code Execution Vulnerability

A use-after-free vulnerability has been identified in the ALGO 8180 IP Audio Alerter, allowing remote code execution. This issue arises from improper handling of SIP calls, where the absence of object existence validation before performing operations creates an opportunity for exploitation. Notably, authentication is not required to leverage this vulnerability.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected device, with the executed code running in the device's context.

Remediation

The recommended mitigation strategy is to limit interactions with the affected product.