RICHARDSON, Texas -- Sipera VIPER Lab, operated by Sipera Systems, the leader in pure security for VoIP, mobile and multimedia communications, today disclosed six threat advisories, and potential solutions, for SIP-based VoIP phones from Aastra, Polycom and Snom. These threat advisories are in addition to the WiFi/dual-mode phone and general SIP vulnerabilities published earlier this spring by Sipera VIPER Lab.
The major threat advisories that affect these SIP phones include:
Unlike PCs and laptops, IP handsets act as servers on the network since they need to answer calls. With multiple open ports and services running on thousands of these IP handsets in the enterprise, they can be easily exploited by hackers and malicious users, said Krishna Kurapati, Sipera founder/CTO and head of Sipera VIPER Lab. As an example, one vulnerability exposed today could open an executives private call records, which would be particularly problematic for these organizations. Sipera works with its customers and vendors to identify and address these vulnerabilities before they become a major issue.