Cisco VoIP phones part of security weakness demo

13.05.2011
At an upcoming conference in Australia, firm HackLabs is expected to demonstrate how hackers perform VoIP attacks and identify weaknesses in and other manufacturers phones.

HackLabs director Chris Gatford has not responded to questions about exactly what type of Cisco VoIP phones and systems will be subject to close examination for security weaknesses. The AusCERT 2011 presentation that HackLabs will do next week is described as "a one-day tutorial" of intensive, hands-on training in which "participants will learn how hackers perform VoIP Attacks and how to remediate common vulnerabilities. Attendees will learn how hackers can methodically gain entry access to an organization's telephony systems to steal information and abuse services."

The conference session description says the HackLabs attacks will focus on Cisco phones, and Office Communicator.

A spokesman for Cisco says the company has "reached out to the conference organizers and speakers for more details. At this point we have no information to suggest any undisclosed product vulnerabilities, but we will assess any new information and respond in line with our well-established process for the public reporting of security vulnerabilities," which are identified .

The Cisco spokesman adds, "It's important to note that the presenters' public comments reference the importance of securing IP phones in line with the manufacturer's installation and configuration recommendations, and we support this message and recommend it as best practice for our customers."