Approved changes feed: RSS · Atom

cpe:2.3:a:algo:8180_ip_audio_alerter:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAlgo (48df5d08-e161-5bd9-97fd-e372c571908b)
Product8180 Ip Audio Alerter (b35bd047-0c80-50a6-a0d6-b87a7999cfa7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-0796 vulnerable 2026-06-08 07:47:13.196554 ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability
HIGH (7.2)
ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific flaw exists within the web-based user interface. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-28322.
Published: 2026-01-23T02:55:04.646Z
Updated: 2026-01-23T19:50:16.248Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0795 vulnerable 2026-06-08 07:47:13.196113 ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability
HIGH (7.2)
ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific flaw exists within the web-based user interface. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-28321.
Published: 2026-01-23T03:01:40.234Z
Updated: 2026-01-23T16:35:41.535Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0794 vulnerable 2026-06-08 07:47:13.195590 ALGO 8180 IP Audio Alerter SIP Use-After-Free Remote Code Execution Vulnerability
HIGH (8.1)
ALGO 8180 IP Audio Alerter SIP Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of SIP calls. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-28303.
Published: 2026-01-23T03:01:36.462Z
Updated: 2026-01-23T16:36:15.928Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0793 vulnerable 2026-06-08 07:47:13.194938 ALGO 8180 IP Audio Alerter InformaCast Heap-based Buffer Overflow Remote Code Execution Vulnerability
HIGH (8.1)
ALGO 8180 IP Audio Alerter InformaCast Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the InformaCast functionality. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-28302.
Published: 2026-01-23T03:01:32.721Z
Updated: 2026-01-23T16:36:50.354Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0792 vulnerable 2026-06-08 07:47:13.194531 ALGO 8180 IP Audio Alerter SIP INVITE Alert-Info Stack-based Buffer Overflow Remote Code Execution Vulnerability
HIGH (8.1)
ALGO 8180 IP Audio Alerter SIP INVITE Alert-Info Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the Alert-Info header of SIP INVITE requests. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-28301.
Published: 2026-01-23T03:01:28.992Z
Updated: 2026-01-23T16:37:17.232Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0791 vulnerable 2026-06-08 07:47:13.194247 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0790 vulnerable 2026-06-08 07:47:13.193781 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0789 vulnerable 2026-06-08 07:47:13.192971 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0788 vulnerable 2026-06-08 07:47:13.192687 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0787 vulnerable 2026-06-08 07:47:13.192189 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0786 vulnerable 2026-06-08 07:47:13.191680 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0785 vulnerable 2026-06-08 07:47:13.191134 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0784 vulnerable 2026-06-08 07:47:13.190708 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0783 vulnerable 2026-06-08 07:47:13.190192 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0782 vulnerable 2026-06-08 07:47:13.189805 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0781 vulnerable 2026-06-08 07:47:13.189336 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0780 vulnerable 2026-06-08 07:47:13.189014 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0779 vulnerable 2026-06-08 07:47:13.186554 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.