We remind all snom phone customers about the security advice at http://wiki.snom.com/FAQ/How_do_I_secure_my_phone
In particular the advice to set an admin mode password on the phone. The web interface of the phone can be accessed using the admin mode password. The default of `0000` is not secure.
A http password alone is not enough to protect the web interface of the phone.
If an attacker can access the web interface of your phone, they can dial a call, which might result in fraudulent calls being made.