Cisco tackles security threat

Cisco is trying to tackle a security threat in its VoIP phones that allow hackers to eavesdrop on conversations. The threat was discovered by a researcher working for Telindus, and allows hackers to remotely eavesdrop on Cisco Unified IP phones.

Cisco Systems has confirmed that it is possible to eavesdrop on remote conversations using Cisco VoIP phones.

The company has stated that an attacker with valid Extension Mobility authentication credentials could cause a Cisco Unified IP Phone configured to use the Extension Mobility feature to transmit or receive a Real-Time Transport Protocol audio stream.

Cisco adds that Extension Mobility authentication credentials are not tied to individual IP phones, and that any Extension Mobility account configured on an IP phone's Cisco Unified Communications Manager/CallManager service can be used to perform an eavesdropping attack.

Cisco has published some work-arounds to this problem in its security response.





Post a comment

Your email address will not be published. Required fields are marked *

*

Visited 365 times, 1 so far today