Need to factory reset some T26, T28and T46 IP phones without admin password

[SupCryp]

Hello,

One of our customers has been attacked. The attackers managed to place a few admin passwords and change the configuration so a long press on OK asks for the password.

They tried admin/admin and admin/(empty password), all returns as incorrect passwords.

They also tried to unplug the power cable, they kept the OK button pressed down while re-plugging in the power cable, same problem.

So we are stuck for now. Any hint ?

Thanks.

[imabev]

Pressing and holding the "ok" button for 10 seconds resets these phones to factory. It will ask "reset to factory?" - press the button for yes or ok. The only other reason why i think this may not work is that you are resetting to factory but its still getting the provisioning template from the server (with a different password).

[SupCryp]

Thank you, but no provisioning is used and the attacker managed to put a password PLUS he enabled the phone so it asks for the admin password after you press OK for ten seconds!