Description

FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions prior to 16.0.96 and 17.0.1 through 17.0.9 have a weak default password. By default, this is a 6 digit numeric value which can be brute forced. (This is the app_password parameter). Depending on local configuration, this password could be the extension, voicemail, user manager, DPMA or EPM phone admin password. This issue is fixed in versions 16.0.96 and 17.0.10.

INFO

Published Date :

2025-12-10T22:43:06.673Z

Last Modified :

2025-12-11T15:37:44.757Z

Source :

GitHub_M
AFFECTED PRODUCTS

The following products are affected by CVE-2025-67513 vulnerability.

Vendors Products
Freepbx
  • Endpoint Manager
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-67513.

URL Resource
https://github.com/FreePBX/security-reporting/security/advisories/GHSA-426v-c5p7-cp29 cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Attack Requirements
Privileges Required
User Interaction
VS Confidentiality
VS Integrity
VS Availability
SS Confidentiality
SS Integrity
SS Availability