Abusing Zoom's Zero Touch Provisioning for Remote Attacks on Desk Phones