Avaya INDeX PBX Security Audit: An Auditor's Perspective

Private Automatic Branch Exchanges (PABX) or Private Branch Exchanges (PBX) - the term is used interchangeably as almost all PBX systems are now automatic - are often overlooked when organisations assess and audit the state of their internal security. This oversight is curious as most PBX systems are networked, ship with the majority of functions enabled by default and often run software and common services that have the same vulnerabilities as many other systems, frequently more so as patch levels are rarely maintained.