Cisco VoIP phones capable of eavesdropping
04/Dec/2007 11:48 / news.asteriskguru.com
section: Voip hardware
Cisco Unified IP Phone 7900 Series handsets are capable of eavesdropping voice calls, according to a security alert by Cisco Systems in response to a presentation given at the Hack.Lu 2007 security conference by Joffrey Czarny. All Cisco IP phones that support Extension Mobility (a feature enabling users to configure a phone as their own on a temporary basis) were vulnerable. According to Cisco "an attacker with valid Extension Mobility authentication credentials could cause a Cisco Unified IP Phone configured to use the Extension Mobility feature to transmit or receive a Real-Time Transport Protocol (RTP) audio stream." The risk though, is low level, as at least the following conditions must be met: · The internal web server of the IP phone must be enabled. The web server is enabled by default. Source: Read original source |
| Add Comment |
More Voip hardware Headlines:
Latest Tutorials:
Latest Comments: