And this is surprising?
IP phones are just computers in a phone case. If there's a security weakness to be exploited then it eventually will be.
Its another example of the percieved increase in useful functionality (oh really? Is that what the salesman said?) vs security. Stick to a PoTS PBX and you'll be fine.
One placed I worked a few years ago love to brag about their shiny new IP phone system. Shame the damn thing was down a couple of hours every week due to network issues & SIP server failures etc etc. Was a joke.
Biting the hand that feeds IT
