CVE-2025-67513
MediumCVSS 6.9Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions prior to 16.0.96 and 17.0.1 through 17.0.9 have a weak default password. By default, this is a 6 digit numeric value which can be brute forced. (This is the app_password parameter). Depending on local configuration, this password could be the extension, voicemail, user manager, DPMA or EPM phone admin password. This issue is fixed in versions 16.0.96 and 17.0.10.
Risk Assessment
An attacker can brute force the weak default password and gain administrative access to telephony endpoints, potentially leading to call hijacking or eavesdropping.
Recommendation
Update FreePBX Endpoint Manager to version 16.0.96 or 17.0.10 (or later) and change default app_password values to strong, unique ones.
Other vulnerabilities in FreePBX Endpoint Manager
Original NVD description (English source)
FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions prior to 16.0.96 and 17.0.1 through 17.0.9 have a weak default password. By default, this is a 6 digit numeric value which can be brute forced. (This is the app_password parameter). Depending on local configuration, this password could be the extension, voicemail, user manager, DPMA or EPM phone admin password. This issue is fixed in versions 16.0.96 and 17.0.10.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS