Openscape Business Hacked

[Alceo]

Hi, we have an OB with software R2.4 where someone has done international calls to numbers that charges very high prices.
These calls have been made during holydays when no one was present and in the call log they are showed with no extension.

Our system is not exposed to internet so we really don't know how this was possible.
Has anyone had a similar experiece? What could we check to understand how this happened?

Many thanks!

 

[LoPath]

They may have got in through voicemail? Do you have CDR records to trace these calls through your system?

LoPath
Maintain HiPath 4000 V5 & V6, OpenScape Xpert V4 & V6, OpenScape Xpressions V7, OpenScape Contact Center V8, OpenScape Voice V9

 

[thepfy]

Could be as simple as someone forwarding their number to the external destination in question and then ringing their phone.

Check whether they need call forward external.
Check trunk to trunk allowed.
Check permissions.

 

[samduo]

Expert mode > Statistics > Telephony Statistics > Forwarding
I bet someone has a FWD on somewhere.
Do you have any SIP devices?

Siemens/Unify - Hipath 3000, Openscape Office and Openscape Business.

 

[samduo]

eniyamath - Start a new thread

Siemens/Unify - Hipath 3000, Openscape Office and Openscape Business.