[cisco-voip] Obtaining IP Phone S/N remotely

[Aaron Daniels - Lists]

Alrightey then,
I'll throw this to you knowledgeable folk as so far the TAC has been
stumped.

We are trying to obtain a complete list of all the serial numbers of the IP
phones in our network.
Ciscoworks user tracking does not hold the Serial.
A portscan reveals that SNMP is open on a phone but I have no idea what the
community string is.

Does anyone have any other ideas to obtain all phone Serial Numbers
remotely?

Thanks,
Aaron