11-29-2007 07:12 AM - edited 03-13-2019 04:45 PM
Cisco has a reponse about remotely eavesdrop using Cisco Unified IP Phones.
I just know URI. Anybody can let me know, where(from what software interface) can I use URI commands? Thanks.
12-06-2007 12:47 PM
The SIP Dialer differs from SCCP dialer, because the Cisco Unified IP Phone (SIP) has more functionality and operates differently due to Dial Rules and Key Press Markup Language (KPML) functionality.
When a comma is selected during the KPML digits exchange, the Cisco Unified IP Phone (SIP) will cancel the KPML subscription and Cisco Unified Communications Manager. As a result, the call will fail to route.
Ensure the primary telephone number is valid when selecting digits on a Cisco Unified IP Phone (SIP).
12-14-2007 07:34 AM
Hi,
You use URI through the built in web server. You could use something like this to enable streaming from an IP-Phone. Save the html below to a file, for example listen.htm. Edit the IP-addresses, and open the file in a local browser window. You'll need a user account that is associated with the phone in order to post the form, and the web server in the phone must be enabled. The vulnerability is basically that Extension Mobility does not encrypt passwords, but aside from that this is possible to do regardless as long as You achieve the login credentials to the phone (with social engineering, brute force etc)
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide