Mitel MCD Voice Mail Hack

[Davey Boy]

Hello From NZ
System MCD 3300 MXE III, V6, Embedded Voice Mail
I have a customer who has had an attack on their Embedded Voice Mail via the Auto Attendant using the default pin (now changed) and changed the Extension no of Mail Box "0" to "1111", also changed the operators extension no to an external no, but couldn't call this because of the VM ports being Toll Barred.
The main impact was the incoming calls where transiting the system to "1111" which is NZ emergency service.
The question is how do they change the extension no of mail box "0"
All Pin No's have been changed.
Any help/answers appreciated.

[ralph]

They logged into the 9999 mailbox with an admin or technician password.

You need to be sure to change those also.

Ralph

[Davey Boy]

Thanks, yes that's what I thought, but cannot see how they would make the change, I have tried to emulate the hack but no luck, but then again these are smart cookies.

Regards