Auth bypass in Mobatime Amxgt-100
CVE-2025-2407
Missing Authentication & Authorization in Web-API in Mobatime AMX MTAPI v6 on IIS allows adversaries to unrestricted access via the network. The vulnerability is fixed in Version 1.5.
Vulnerability class: Broken Authentication
EPSS: 0.005 (37.9th percentile) — read the EPSS interpretation.
Affected products
- Mobatime Amxgt-100 — versions 0
- Mobatime Amx Mtapi — versions 0