Detections
Analytics
FreePBX 17.0.2.36 < 17.0.3 Command Injection (GHSA-vm9p-46mv-5xvw)
high Nessus Plugin ID 298039
Language:
Synopsis
The remote web server hosts a PHP application that is affected by a command injection vulnerability.Description
The version of FreePBX installed on the remote host is 17.0.2.36 or later but prior to 17.0.3. It is, therefore, affected by a command injection vulnerability:- The filestore module within the Administrative interface is vulnerable to a post-authentication command injection by an authenticated known user via the testconnection -> check_ssh_connect() function. An attacker can leverage this vulnerability to obtain remote access to the system as an asterisk user.
(CVE-2025-64328)
Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
Solution
Upgrade to FreePBX version 17.0.3 or later.See Also
Plugin Details
Severity: High
ID: 298039
File Name: freepbx_CVE-2025-64328.nasl
Version: 1.3
Type: remote
Family: CGI abuses
Published: 2/5/2026
Updated: 2/6/2026
Supported Sensors: Nessus
Enable CGI Scanning: true
Risk Information
VPR
Risk Factor: High
Score: 8.4
CVSS v2
Risk Factor: High
Base Score: 8.3
Temporal Score: 6.9
Vector: CVSS2#AV:N/AC:L/Au:M/C:C/I:C/A:C
CVSS Score Source: CVE-2025-64328
CVSS v3
Risk Factor: High
Base Score: 7.2
Temporal Score: 6.7
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C
CVSS v4
Risk Factor: High
Base Score: 8.6
Threat Score: 8.6
Threat Vector: CVSS:4.0/E:A
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Vulnerability Information
CPE: cpe:/a:freepbx:freepbx
Required KB Items: installed_sw/FreePBX
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 11/5/2025
Vulnerability Publication Date: 11/5/2025
CISA Known Exploited Vulnerability Due Dates: 2/24/2026
Reference Information
CVE: CVE-2025-64328