Avaya patched a problem hackers could exploit in phones. But the bad code never went away.

Read more from our friends at Wired.com