Avaya patched a problem hackers could exploit in phones. But the bad code never went away.
http://www.wired.com/