Cisco 7940 exposed

Russell has blogged about security flaws in the 7940 Cisco ip phone series. An interesting read for people who deploy/implement Cisco’s UC (Unified Communnications) solutions across the world.

More thought needs to be given when access lists are configured and I have seen quite a few implementations where there are no access lists configured at all. Very curious to know whether Cisco’s UC implementation manual even talks about it. If not, that is something they need to work on pretty fast.