Zero-Touch-Pwn: Abusing Zoom's Zero Touch Provisioning for Remote Attacks on Desk Phones

Cloud communication platforms like Zoom have become a fundamental aspect of modern communication and are widely used in daily work. However, in certain scenarios, traditional endpoints such as desk phones or analog gateways are still required.

Today, these devices can be integrated with most major cloud communication providers through the use of their provisioning services, which centralize configurations and firmware.

This session is about a security analysis of the Zoom "Zero Touch Provisioning" method in conjunction with certified hardware...

By: …

abusing aspect attacks cloud communication daily devices endpoints major phones platforms today work zero-touch zoom zoom's zero touch provisioning