web statisticsweb stats Originally posted by dtmf: All a tech has to do is call in and change the password to what ever you want the..."> Originally posted by dtmf: All a tech has to do is call in and change the password to what ever you want the..."> Originally posted by dtmf: All a tech has to do is call in and change the password to what ever you want the...">

Business Phone Systems

Previous Thread
Next Thread
Print Thread
Rate Thread
Page 2 of 2 1 2
#75909 09/11/05 02:18 PM
Joined: Sep 2005
Posts: 6
Member
Member
Offline
Joined: Sep 2005
Posts: 6
Quote
<font face="Verdana, Arial" size="2">Originally posted by dtmf:
All a tech has to do is call in and change the password to what ever you want then you would have complete control, You don't have to call avaya there are techs and sites that will call in for alot less them Avaya. the reason it's not let out is that you wouldn't believe how many(10 year old) system that are out there that would be at risk for hackers. I can help but there is a small fee.

I'm sure you wouldn't let your network or web site passwords out would you? Not trying to be rude but just stating the obvious.
</font>


So that would be like saying I went and bought a Linksys router and cannot reset it back to factory defaults. lol. : )

I understand what people are saying about not letting the entire world know what they are, but a simple numeric password is not going to stop a hacker. Personally, I do not even see the point in having a backdoor password as it is a security risk just for it even being there. The soultion should be is if you do not know the admin password, you reset it back to factory defaults and start from scratch. That is how 99% of all other hardware products work. Leave to Avaya to do something stupid like this! lol! : )

Thanks for stating the obvious anyways.

lol, the spellchecker has expired!

[This message has been edited by Jusedawg (edited September 11, 2005).]

Avaya IP Office Help & Support Website
IP Office Help

Avaya IP Office Help & Support Website


FAQs, documentation, videos, updates, and support for the Avaya IP Office business phone system!
Everything you need to know about installing, upgrading, and troubleshooting IP 500v2 and IPO Server Edition systems.

#75910 09/11/05 03:47 PM
Joined: Sep 2005
Posts: 1
Member
Member
Offline
Joined: Sep 2005
Posts: 1
I am new here, but I totally agree with Juse for the most part. It is already a secutiry risk for anyone to know those backdoor passwords.

I also had the same issue once and had to basically do what you guys are talking about, which I found very disturbing that i could not simply reset my own equipment back to some factory default.

At first I thought it was just the equipment provider being an ass and just wanting more money, but as I searched around the internet, I found that it seems to be the case with most out of date phone systems.

Most of the updated, VOIP systems we have been using do not have this issue and we can basically change whatever we want when we want.

Juse, I also had to write a program once to hack our phone system. Let me know and I can send you the code to help you get started. We basically just used a voicecard and dialed into the system like you normally would using a telephone and brute forced all the combinations since there was only 10,000 it took no time at all to send across the DTMF tones and crack it.

Whats funny is, I had to crack the encryption for our IP Office as well for the management software. That was the most basic encrytion I had ever seen and could not believe Avaya put it right in the files, lol! [Linked Image from sundance-communications.com]

Just thought I would sharesome extra thoughts becausee I know first hand how frustrating it can be dealing with phone vendors/installers.

#75911 09/12/05 02:50 AM
Joined: Feb 2005
Posts: 12,360
Likes: 4
Member
***
Member
***
Offline
Joined: Feb 2005
Posts: 12,360
Likes: 4
The soultion should be is if you do not know the admin password, you reset it back to factory defaults and start from scratch.

You just don't get it do you? It's a security issue, they don't want just anybody to reset the system either. That would be a disaster.

Your entire problem boils down to the fact that you have no relationship with an Avaya dealer as you should. If you did you wouldn't be having to ask questions in the internet. Partner systems are supposed to be provided by authorized dealers who will provide tech support to the end user. It was never intended that it would be necessary for the end user to need this information, all you should need to do is call your dealer.

But that's not the situation here, is it? I'm not going to get into the issue of IT people maintaining telecom equipment but suffice it to say it never works. That's why VOIP was invented.

-Hal

[This message has been edited by hbiss (edited September 12, 2005).]


CALIFORNIA PROPOSITION 65 WARNING: Some comments made by me are known to the State of California to cause irreversible brain damage and serious mental disorders leading to confinement.
#75912 09/12/05 06:31 AM
Joined: Sep 2005
Posts: 6
Member
Member
Offline
Joined: Sep 2005
Posts: 6
Quote
<font face="Verdana, Arial" size="2">Originally posted by hbiss:
You just don't get it do you? It's a security issue, they don't want just anybody to reset the system either. That would be a disaster.

</font>

Yes, I understand what you are saying about it being a security risk for just anyone to know these backdoor passwords, but I also say, it just being there is a security risk in of itself. Just because people are dealers, does not mean they could get pissed off one day and go do the same thing.

You are right about us not having a relationship with an authorized dealer because he was terrible. Based on our last dealer, it obviously is not that difficult to become an Avaya authorized dealer.

If I ask him for the solution, he would probably try and charge us over a grand and then it would take him a month to do it at that. So usually, going to a forum or using the internet,a pool people are much more knowledgeable than just one person or company.

And as far as VOIP goes, everyone knows why it was obviously invernted and it has nothing to do with ease of use.

Thanks for help anyways, I found a vendor to reset it no problem.

#75913 09/13/05 02:09 PM
Joined: Sep 2003
Posts: 129
Member
Member
Offline
Joined: Sep 2003
Posts: 129
We need to take a look at the past post. I did a search and found it no problem. Guess these guys just aren't looking.

Page 2 of 2 1 2

Link Copied to Clipboard
Newest Topics
Summit 100 Networking
by Scotty Woods - 08/12/25 05:20 PM
9841 phone with more than one line
by Keyset6 - 08/11/25 04:10 PM
External speaker for IP phone on SV9100
by Yoda - 08/05/25 09:19 AM
Forum Statistics
Forums84
Topics94,581
Posts640,270
Members49,879
Most Online5,661
May 23rd, 2018
Newest Members
Nephron, Cylon Dude, bmorfe66, aounsha, Sean Bruton
49,878 Registered Users
Top Posters(30 Days)
Toner 9
R4+Z 6
dexman 5
Who's Online Now
1 members (Yoda), 438 guests, and 64 robots.
Key: Admin, Global Mod, Mod
Contact Us | Sponsored by Atcom: One of the best VoIP Phone Canada Suppliers for your business telephone system!| Terms of Service

Sundance Communications is not affiliated with any of the above manufacturers. Sundance Phone System Forums - VOIP & Cloud Phone Help
©Copyright Sundance Communications 1998 - 2025
Powered by UBB.threads™ PHP Forum Software 8.0.0