Videos

Published on February 5th, 2020 📆 | 6489 Views ⚑

0

CDPwn – Takeover of Cisco IP Phones

https://www.ispeech.org

What is CDPwn?
Armis has discovered five critical, zero-day vulnerabilities in various implementations of the Cisco Discovery Protocol (CDP) that can allow remote attackers to completely take over devices without any user interaction. CDP is a Cisco proprietary Layer 2 (Data Link Layer) network protocol that is used to discover information about locally attached Cisco equipment. CDP is implemented in virtually all Cisco products including switches, routers, IP phones and cameras. All those devices ship from the factory with CDP enabled by default.

Patches from Cisco can be found here:
https://tools.cisco.com/security/center/publicationListing.x

Armis is the leading agentless, enterprise-class security platform to address the new threat landscape of unmanaged and IoT devices.

source

Tagged with: armis • Axonius • cdpwn • cisco • Cisco IP Phone • Claroty • cyber security • cybersecurity • cyberx • forescout • IP Conference Phone 7832 • IP Conference Phone 8832 • IP Phone 6800 Series • IP Phone 7800 Series • IP Phone 8800 Series • IP Phone 8851 Series • phones • takeover • Unified IP Conference Phone 8831 • Wireless IP Phone 8821 • Wireless IP Phone 8821-EX • zero-day vulnerability • zingbox