Other nomination
Total surveillance made easy with VoIP phone
.mario takes apart the Snom 32x VoIP phone's web interface: CSRF places calls, a persistent XSS in the address book (the number field is unencoded) runs a worm through XHR, call logs are stealable, and the killer step is silently dialling the attacker so the room is bugged with no ring tone, at the victim's expense. No CSRF tokens anywhere, default password 0000.
Record
- Researcher
- .mario
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of .mario, first published at the original source. Preserved copies are kept so the citation survives its host.