[telecom] SEAS Computer Scientists Find Vulnerabilities in Cisco VoIP Phones

open original image

SEAS Computer Scientists Find Vulnerabilities in Cisco VoIP Phones

Computer Science PhD candidate Ang Cui and Computer Science Professor Salvatore Stolfo have found serious vulnerabilities in Cisco VoIP (voice over internet protocol) telephones, devices used around the world by a broad range of networked organizations from governments to banks to major corporations, and beyond. In particular, they have discovered troubling security breaches with Cisco's VoIP phone technology. At a recent conference on the security of connected devices, Cui demonstrated how they can easily insert malicious code into a Cisco VoIP phone (any of the 14 Cisco Unified IP Phone models) and start eavesdropping on private conversations-not just on the phone but also in the phone's surroundings-from anywhere in the world.

..