Incase you haven’t heard by now.
http://www.theregister.co.uk/2012/12/13/cisco_voip_phones_vulnerable/