VoIP NewsDecember 6, 2007
Cisco tackles security threat
by Lin Freestone
Cisco is trying to tackle a security threat in its VoIP phones that allow hackers to eavesdrop on conversations. The threat was discovered by a researcher working for Telindus, and allows hackers to remotely eavesdrop on Cisco Unified IP phones.
Cisco Systems has confirmed that it is possible to eavesdrop on remote conversations using Cisco VoIP phones.
The company has stated that an attacker with valid Extension Mobility authentication credentials could cause a Cisco Unified IP Phone configured to use the Extension Mobility feature to transmit or receive a Real-Time Transport Protocol audio stream.
Cisco adds that Extension Mobility authentication credentials are not tied to individual IP phones, and that any Extension Mobility account configured on an IP phone's Cisco Unified Communications Manager/CallManager service can be used to perform an eavesdropping attack.
Cisco has published some work-arounds to this problem in its security response.
Story link: Cisco tackles security threat
Discuss this in the Techwatch Forums
Related news to "Cisco tackles security threat"
No Comments »
No comments yet.
Leave a commentPrevious: « BT Vision is on trial
Next: Broadband satisfaction down »
Visited 55 times, 2 so far today
