Eavesdropping the Environment

• Vulnerabilities:

• • Signaling extends to the endpoint devices
  • Signaling is neither authenticated nor encrypted

• Attack:

• • Send malformed call set-up signaling to a device

• Effect:

• • Device silently answer the incoming call
  • Audio from the device’s environment may be eavesdropped