CVE-2025-67513

FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions prior to 16.0.96 and 17.0.1 through 17.0.9 have a weak default password. By default, this is a 6 digit numeric value which can be brute forced. (This is the app_password parameter). Depending on local configuration, this password could be the extension, voicemail, user manager, DPMA or EPM phone admin password. This issue is fixed in versions 16.0.96 and 17.0.10.

CVSS

No CVSS.

References

Link	Resource
https://github.com/FreePBX/security-reporting/security/advisories/GHSA-426v-c5p7-cp29

Configurations

No configuration.

History

25 Sep 2026, 23:10

Type	Values Removed	Values Added
Summary		(es) FreePBX Endpoint Manager es un módulo para gestionar endpoints de telefonía en sistemas FreePBX. Versiones anteriores a 16.0.96 y 17.0.1 hasta 17.0.9 tienen una contraseña predeterminada débil. Por defecto, este es un valor numérico de 6 dígitos que puede ser forzado por fuerza bruta. (Este es el parámetro app_password). Dependiendo de la configuración local, esta contraseña podría ser la contraseña de extensión, buzón de voz, gestor de usuarios, DPMA o administrador de teléfono EPM. Este problema está solucionado en las versiones 16.0.96 y 17.0.10.

Information

Published : 2025-12-10 23:15

Updated : 2026-09-25 23:10

NVD link : CVE-2025-67513

Mitre link : CVE-2025-67513

CVE.ORG link : CVE-2025-67513

JSON object : View

Products Affected

No product.

CWE

CWE-521

Weak Password Requirements

{"id": "CVE-2025-67513", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-67513", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-12-11T15:37:39.103414Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.9, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "LOW", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "FreePBX", "product": "endpoint", "versions": [{"status": "affected", "version": "< 16.0.96"}, {"status": "affected", "version": ">= 17.0.1, < 17.0.10"}]}]}], "published": "2025-12-10T23:15:49.140", "references": [{"url": "https://github.com/FreePBX/security-reporting/security/advisories/GHSA-426v-c5p7-cp29", "source": "security-advisories@github.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-521"}]}], "descriptions": [{"lang": "en", "value": "FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions prior to 16.0.96 and 17.0.1 through 17.0.9 have a weak default password. By default, this is a 6 digit numeric value which can be brute forced. (This is the app_password parameter). Depending on local configuration, this password could be the extension, voicemail, user manager, DPMA or EPM phone admin password. This issue is fixed in versions 16.0.96 and 17.0.10."}, {"lang": "es", "value": "FreePBX Endpoint Manager es un m\u00f3dulo para gestionar endpoints de telefon\u00eda en sistemas FreePBX. Versiones anteriores a 16.0.96 y 17.0.1 hasta 17.0.9 tienen una contrase\u00f1a predeterminada d\u00e9bil. Por defecto, este es un valor num\u00e9rico de 6 d\u00edgitos que puede ser forzado por fuerza bruta. (Este es el par\u00e1metro app_password). Dependiendo de la configuraci\u00f3n local, esta contrase\u00f1a podr\u00eda ser la contrase\u00f1a de extensi\u00f3n, buz\u00f3n de voz, gestor de usuarios, DPMA o administrador de tel\u00e9fono EPM. Este problema est\u00e1 solucionado en las versiones 16.0.96 y 17.0.10."}], "lastModified": "2026-09-25T23:10:00.463", "sourceIdentifier": "security-advisories@github.com"}