CNNVD-202601-4157 Information

CNNVD ID

CNNVD-202601-4157

CVE-2026-0791

  • CNNVD Published: 2026-01-23

Description (Chinese)

ALGO 8180 IP Audio Alerter是ALGO公司的一款IP扬声器。 ALGO 8180 IP Audio Alerter存在安全漏洞,该漏洞源于处理SIP INVITE请求的Replaces标头时缺少对数据长度的验证,可能导致栈缓冲区溢出和远程代码执行。

Description (English)

ALGO 8180 IP Audio Alerter is an IP speaker for ALGO. ALGO 8180 IP Audio Alerter has a security loophole, which stems from the lack of validation of the length of the data when processing the Replaces header requested by SIP INVITE, which could lead to spills and remote code execution in the fence.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

Algo

Published

2026-01-23

Last Modified

2026-02-24

References

https://www.zerodayinitiative.com/advisories/ZDI-26-013/

Share on: