Been looking at the BT SIN documents in order to get my caller display to work, I can see the caller display info being sent ok to the ATA if the syslog debug output is ok to believe, but considering v.23 protocol was one of the old dial up modem protocols, and the fact the ATA's can parse this date and punt it over the network in the syslog debug output showing caller ID, I wondered if anyone has attempted to use this method to gain access to a network?
Is the firmware secure enough to only accept the data sent according to international standards?
This is only something the telecom providers can do, which makes this close to state level hacking and we know from the Edward Snowden leaks, the Five Eyes did target telecoms companies, but due to having constantly hacked systems despite implementing best practice for security across the board, my systems still keep "playing up". Earlier today, I captured some data when using the syslog audio and debug dump option in a SPA3102 when no phone calls were taking place, so now its made me wonder if this is an exploitable attack vector?
Admittedly most people don't run everything with syslog server on full debug as a matter of course, even capturing all network traffic at multiple points in a network so most probably wont see this sort of thing happening, but as I have unaccounted for data from these syslog messages, its got me thinking, so has anyone tried using this method to gain access to a network?
If so care to share notes? Drop me a pm if required.
Anyone know if its possible to switch off this facility so the ATA's wont accept any v23 data?
TIA
