Forum for Science, Industry and Business

Sponsored by:     3M 
Search our Site:

 

Danger over the phone

14.08.2019

Hackers can access sensitive data and services also via telephone devices: Most companies use VoIP telephones that are integrated into the company network. Security researchers at the Fraunhofer Institute for Secure Information Technology have found a total of 40 partly serious vulnerabilities in these VoIP telephones. Attackers can misuse these gaps to intercept calls, deactivate the telephone or gain further access to the company network. The VoIP telephones producers have by now closed these vulnerabilities. The researchers presented the results of their investigations at DEFCON, one of the world’s largest hacker conferences.

The security experts at Fraunhofer SIT tested a total of 33 VoIP telephone devices from 25 different manufacturers for flaws and vulnerabilities. For this purpose, they examined the devices’ web-based user interfaces , which administrators can use to configure the phones.


Researchers at Fraunhofer SIT find serious security flaws in VoIP telephones

Fraunhofer SIT

Even the security experts were surprised by the results: "We didn't expect to find so many critical gaps, because these devices have been on the market for a long time and they should have been tested and secure," explains Stephan Huber, one of the researchers involved in the study.

One type of vulnerability was so severe that the security researchers were able to gain complete administrative control over the VoIP phone. "This is a total security failure", says scientist Philipp Roskosch, who was involved in the investigation as well.

Attackers could also use this to manipulate other devices in the same network, such as other VoIP telephones, computers or production machines. This attack was possible with seven devices. Another attack scenario was a denial of service attack that took VoIP phones out of action. This can damage the business of customer hotlines, e.g. banks or insurance companies.

The security researchers informed all the manufacturers of the VoIP telephones investigated about the vulnerabilities found; they all reacted and closed the gaps. The Fraunhofer SIT experts therefore advise all users to keep their own devices up to date and to pay attention to updates for the device firmware.

Further technical details on the VoIP telephones investigated and the gaps can be found on the Internet at www.sit.fraunhofer.de/cve 

Oliver Küch | Fraunhofer-Institut für Sichere Informationstechnologie SIT

Further reports about: SIT Sichere Informationstechnologie VoIP VoIP phones

More articles from Information Technology:

nachricht Artificial intelligence in the fight against river blindness
14.08.2019 | Rheinische Friedrich-Wilhelms-Universität Bonn

nachricht All-optical diffractive neural network closes performance gap with electronic neural networks
14.08.2019 | SPIE--International Society for Optics and Photonics

All articles from Information Technology >>>

The most recent press releases about innovation >>>

Die letzten 5 Focus-News des innovations-reports im Überblick:

Im Focus: A miniature stretchable pump for the next generation of soft robots

Soft robots have a distinct advantage over their rigid forebears: they can adapt to complex environments, handle fragile objects and interact safely with humans. Made from silicone, rubber or other stretchable polymers, they are ideal for use in rehabilitation exoskeletons and robotic clothing. Soft bio-inspired robots could one day be deployed to explore remote or dangerous environments.

Most soft robots are actuated by rigid, noisy pumps that push fluids into the machines' moving parts. Because they are connected to these bulky pumps by tubes,...

Im Focus: Vehicle Emissions: New sensor technology to improve air quality in cities

Researchers at TU Graz are working together with European partners on new possibilities of measuring vehicle emissions.

Today, air pollution is one of the biggest challenges facing European cities. As part of the Horizon 2020 research project CARES (City Air Remote Emission...

Im Focus: Self healing robots that "feel pain"

Over the next three years, researchers from the Vrije Universiteit Brussel, University of Cambridge, École Supérieure de Physique et de Chimie Industrielles de la ville de Paris (ESPCI-Paris) and Empa will be working together with the Dutch Polymer manufacturer SupraPolix on the next generation of robots: (soft) robots that ‘feel pain’ and heal themselves. The partners can count on 3 million Euro in support from the European Commission.

Soon robots will not only be found in factories and laboratories, but will be assisting us in our immediate environment. They will help us in the household, to...

Im Focus: Scientists create the world's thinnest gold

Scientists at the University of Leeds have created a new form of gold which is just two atoms thick - the thinnest unsupported gold ever created.

The researchers measured the thickness of the gold to be 0.47 nanometres - that is one million times thinner than a human finger nail. The material is regarded...

Im Focus: Study on attosecond timescale casts new light on electron dynamics in transition metals

An international team of scientists involving the Max Planck Institute for the Structure and Dynamics of Matter (MPSD) in Hamburg has unraveled the light-induced electron-localization dynamics in transition metals at the attosecond timescale. The team investigated for the first time the many-body electron dynamics in transition metals before thermalization sets in. Their work has now appeared in Nature Physics.

The researchers from ETH Zurich (Switzerland), the MPSD (Germany), the Center for Computational Sciences of University of Tsukuba (Japan) and the Center for...

All Focus news of the innovation-report >>>

Anzeige

Anzeige

VideoLinks
Industry & Economy
Event News

4th Hybrid Materials and Structures 2020 28 - 29 April 2020, Karlsruhe, Germany

14.08.2019 | Event News

What will the digital city of the future look like? City Science Summit on 1st and 2nd October 2019 in Hamburg

12.08.2019 | Event News

Jena Laser Technology Conference brings together top international researchers

12.08.2019 | Event News

 
Latest News

Climate change 'disrupts' local plant diversity, study reveals

16.08.2019 | Life Sciences

Finnish discovery brings new insight on the functioning of the eye and retinal diseases

16.08.2019 | Life Sciences

A Rescue Plan for the Ocean

16.08.2019 | Ecology, The Environment and Conservation

VideoLinks
Science & Research
Overview of more VideoLinks >>>