Re: Doesn't give any details
" it'll scan the network and if it finds a vulnerable device, it'll run."
How likely is it that, in any sensible deployment, voice and data aren't on separate VLANs for isolation and QoS purposes? Unless you can show that, then the real world impact is zero. Furthermore as data and voice are likely to be isolated, the proposed solution of strong random passwords is a sufficient, but probably not necessary condition for solving the problem.
The real issue here is over hyping security by the technology press.