Page 2 of 2
During the presentation, systems expert Cui showed the Cisco phone at the White House and on Air Force One. The device is not really a phone, he said, but a general purpose computer put into a plastic case to make it look like a phone. The device runs Cisco's proprietary UNIX OS and Java. It uses the SSH protocol, but "the way it's implemented makes it worse than Telnet," Cui said.
Despite being signed firmware, Cui said he found the code signing only takes place at boot time. Once the phone boots up, an attacker can log in, download any code they want and execute it from the temp directory, he said.
PUBLISHED JAN. 11, 2013
<< Previous
|
1
|
2
