Preliminary setupįirst, we bought a couple of 9608G VoIP phones, powered them up, and connected them via a POE Adapter to our research network. The Target was to extract the firmware and allows dynamically debug and reverse engineer the system. In this part, we’ll show a research setup and preparation for the vulnerability research. This blog details the research we did into an Avaya 9608G IP Phone – the findings can be generally extrapolated to other Avaya models because they have a common base. Knowing this, we took a look at Avaya’s IP phones, which are quite common in healthcare delivery organizations, to try to understand their vulnerabilities and the risks they may pose. While convenient and cost effective, if an IP phone is compromised it can give an attacker a way into the network. A voice over IP ( VoIP) phone enables you to place and transmit telephone calls over an IP network, like the Internet, instead of the traditional public switched telephone network (PSTN), using control protocols, such as the Session Initiation Protocol (SIP), Skinny Client Control Protocol (SCCP), and various other proprietary protocols.
0 kommentar(er)
