Medium severity · published Dec 10, 2025
CVE-2025-67513
FreePBX Endpoint Manager's Weak Default Password Allows Unauthenticated Access in Endpoint Module REST API
6.9
CVSS
0.3%
EPSS
No
On KEV
Description
FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions prior to 16.0.96 and 17.0.1 through 17.0.9 have a weak default password. By default, this is a 6 digit numeric value which can be brute forced. (This is the app_password parameter). Depending on local configuration, this password could be the extension, voicemail, user manager, DPMA or EPM phone admin password. This issue is fixed in versions 16.0.96 and 17.0.10.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 19% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EN
endpoint · FreePBX
< 16.0.96; >= 17.0.1, < 17.0.10 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-67513
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-67513
github.com
https://github.com/FreePBX/security-reporting/security/advisories/GHSA-426v-c5p7-cp29
More from endpoint
9.8
CVE-2025-57819
FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE
8.6
CVE-2025-61675
FreePBX Endpoint Manager vulnerable to authenticated SQL injection in multiple configuration parameters
8.6
CVE-2025-59051
FreePBX Endpoint Manager command injection via Network Scanning feature