Cisco Phone Controller

Cisco Phone Controller

ID: nmbgmlcgfijmpcpphmdndjjchiokjlfb

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
1.7
Size
0.04 MB
Rating
3.8/5
Reviews
5
Users
522
Type
Extension
Updated
Dec 27, 2020
Category
Workflow & planning
Price
Free
Featured
No
Visibility
Unlisted
Mature
No
By Google
No
Trusted
No

Publisher Contextual Analysis

Author
avhollowayView Profile
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Total Extensions
1
Active
1
Obsolete
0
Listed
0
Unlisted
1
Total Users
522
Screenshot 1

Embeds a Remote Phone Control App on the Phone's internal Web Page

Why? Cisco Collaboration Administrators often access Cisco Phone internal web server to troubleshoot the phone. They view items such as: firmware loads, hardware versions, network details, etc., and this add-on embeds a remote phone control app to that same page they're already looking at. How? Press the keypad buttons for selecting menu options or navigating the menus. Press the command buttons like NavUp or VolDwn (Buzz is fun!) for even more control over the phone. For convenience you can enter a dial string and make the phone call someone, or you can script out key presses for like deleting ITL files. Oh yeah, and you can even click on the phone screenshot to activate lines, softkeys and session buttons! Yeah, But Like How Does it Work? The add-on renders the phone screen as a screenshot (pulled from /CGI/Screenshot), at which point the phone will request HTTP Basic Authentication from you, and then the phone will send those credentials over to CUCM at the designated Authentication URL; either in Enterprise Parameters, or directly configured on the phone. If your username and password are correct, and that user is controlling the phone, then the phone allows you to see the screenshot and control it. Typically, I will create a dedicated Application User for this called "phonecontrol" which has no group memberships, and thus, has no other real power in the system, other than controlling the phone(s) I intend, for the time period I choose. The add-on then polls for a new screenshot periodically, to keep the screen fresh, while allowing you to press buttons which send commands to the phone via /CGI/Execute.

Item
Type
Severity
Description
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 15% increase: Older manifest version lacks modern security controls
Older Manifest Version
Risk Factor
Medium
This extension uses Manifest Version 2
URLs
1
IPv4
1
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

clients2.google.com/service/update2/crxhttps://clients2.google.com/service/update2/crx

Gain full insight into all external connections.

Upgrade for full visibility.

239.1.1.13
IPv4
-
Version
Size
Is Malicious
Findings
Permhash
1.7
Latest
0.04 MB
Benign
—N/A
Showing 1 to 1 of 10 rows
Rows per page:

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.