Explore the vulnerabilities of modern cloud-based smart intercoms in this eye-opening conference talk from Nullcon Berlin 2023. Delve into the inner workings of these devices, understanding how they leverage VOIP technologies and protocols such as SIP, SDP, STUN, and RTP for communication. Discover the security flaws uncovered during a real-world investigation, including pre-auth remote code execution vulnerabilities and unauthorized access to cloud-connected device imagery. Learn how these exploits can lead to silent video stream access, potentially compromising privacy and security. Gain valuable insights into the intersection of convenience and cybersecurity in smart building technologies, and understand the importance of thorough security assessments for Internet of Things devices.