Here’s a video on how someone rogue can exploit the web server of an IP Phone / Soft Phone installed in your organization and get information about call processing server, TFTP, network information and so on.
CIPC / IP Phone Web Server Exploit – Revealing Ton of Information
To know about more attacks on the same lines and how you can defend your turf, read Cisco Press publication Securing Cisco IP Telephony Networks
Securing Cisco IP Telephony Networks provides an all-in-one reference to Cisco UC, IP Telephony and security professionals as well as decision makers. Here’s your chance to grab two free chapters offered by Cisco Press as sample content from the newly released book.
While Chapter 1 introduces you to the world of Cisco IP Telephony security as well as various threats, business challenges, and so on Chapter 4 gives an insight to a Security Framework around Cisco IP Telephony / Unified Communications which will enable you/your organization to successfully implement the right level of security for Cisco UC applications, underlying network, devices, and so on.
You can access the free content here:
Chapter 1 courtesy Cisco Press
Index and Chapter 4 courtesy Cisco Press
If you enjoyed the free sample chapters, you can buy the eBook or grab a paperback copy @
Amazon (Kindle edition, eBook)
For Indian Subcontinent/AsiaPac readers Infibeam (Paperback)
Akhil's Cloud and Security Blog 