I have a customer that keeps getting the 3 bad voicemail passcodes message.
I have had her change her pin and she has gotten it twice since then.
Is there a particular vulnerability I should be checking on?
No...
One of three or four things is happening here:
1) The customer is just messing up the password
2) There is an equipment failure somewhere, like a bad keypad on the phone. This usually is accompanied by other user complaints
3) Another user is accessing the wrong extensions mailbox (Oh, I though my extension was 127, not 137) which I have seen more than once.
4) A hacking attempt. (still occurs, but is much less prevalent than it used to be)
Regardless of the problem, the AVDAP log will answer the question of the cause and most likely the solution. Find out the next time it happens, pull the avdap log and go back and look at the what extension/outside number called the VM, entered the user's extension number, and see what passcode the attempted to enter. I am guessing you will find the answer and solution very quickly.