The new Cisco Unified IP VOIP Phone has a fatal flaw that allows a hacker to do many different things using like VoIP accounts enumeration, Communication wiretapping, Spoofing of phone profiles and identity spoofing, Bypass of call restrictions and voice gateway abuse, Grab of SIP or IAX credentials, Denial of Service on VoIP servers and IP phones, and more. Using VOIP for your business may save you money on long distance phone bills but is it worth the risk? Is your network secure enough to prevent these kind of attacks? My guess would be probably not. Someone could easily obtain this exploit code and use it on your network for one of a thousand motives.

Here is a live demonstration of the new Cisco Unified IP VOIP Phone Exploit.