CVE-2025-2407 — Missing Authentication & Authorization in Web-API allows adversary unrestricted access

CVE-2025-2407

Missing Authentication & Authorization in Web-API allows adversary unrestricted access PUBLISHED

Description (CNA)

Missing Authentication & Authorization in Web-API in Mobatime AMX MTAPI v6 on IIS allows adversaries to unrestricted access via the network. The vulnerability is fixed in Version 1.5.

Affected (CNA)

Vendor / product	Versions
Mobatime / AMX MTAPI	affected 0 through 6
Mobatime / AMXGT-100	affected 0 before 1.5

CWE

CWE-306, CWE-862

References

https://mobatimemtsl.github.io/Vulnerability-References/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.