Vulnerability allows attackers to compromise the firmware of the Cisco IP Phone in boardrooms or on employees` office desks to eavesdrop on private conversations. Columbia University researchers at Columbia University managed to activate the IP Phone microphone without lifting the handset, and to remotely listen to conversations. Cisco issued an advisory to customers handling vulnerable IP phones until the permanent patch is issued on January 21st. The permanent patch will be available to customers with vulnerable IP Phones until the end of the month, with the permanent fix scheduled for January 21th.”]