Subscribe to the Free Print Edition!
Celebrating 25 Years

Careful with that call

Sidebar: Bringing VOIP vulnerabilities to light

By William Jackson

VoIPshield Systems recently released the results of vulnerability research on the most widely used voice-over-IP systems. Researchers found more than 100 design or implementation flaws in products from Avaya, Nortel Networks and Cisco Systems that could allow outsiders to execute code on handsets, PCs or servers; compromise systems; block service; or steal accounts.

The results have been published as 44 discreet vulnerabilities at www.voipshield.com/research. VoIPshield has worked with the vendors to find fixes for the problems and is incorporating the information into its VOIP vulnerability analysis tool and intrusion-prevention system.

VOIP vulnerabilities

A study by VoIPshield Systems identified 44 vulnerabilities in three vendors’ voice-over-IP systems.

By vendor

By severity

Patches

● Avaya: 12

● Nortel: 5

● Cisco: 27

● Critical: 15

● High: 9

● Medium: 11

● Low: 9

● Available: 17

● Being developed: 27



GCN Popup