Mobatime
7 CVEs across 7 Mobatime products. Browse Mobatime vulnerabilities, severities, and proof-of-concept exploits.
Mobatime products with known CVEs
Mobatime CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-2407 | | | 2025-05-27 | Missing Authentication & Authorization in Web-API in Mobatime AMX MTAPI v6 on IIS allows adversaries to unrestricted access via the network. The vulnerability… |
CVE-2024-12286 | Critical | 9.8 | 2024-12-10 | MOBATIME Network Master Clock - DTS 4801 allows attackers to use SSH to gain initial access using default credentials. |
CVE-2023-3066 | High | 8.1 | 2023-06-05 | Incorrect Authorization vulnerability in Mobatime mobile application AMXGT100 allows a low-privileged user to impersonate anyone else, including administrators… |
CVE-2023-3065 | Critical | 9.1 | 2023-06-05 | Improper Authentication vulnerability in Mobatime mobile application AMXGT100 allows Authentication Bypass.This issue affects Mobatime mobile application AMXGT… |
CVE-2023-3064 | High | 7.5 | 2023-06-05 | Anonymous user may get the list of existing users managed by the application, that could ease further attacks (see CVE-2023-3065 and 3066)This issue affects Mo… |
CVE-2023-3033 | Medium | 6.8 | 2023-06-02 | Incorrect Authorization vulnerability in Mobatime web application allows Privilege Escalation, Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2023-3032 | High | 8.1 | 2023-06-02 | Unrestricted Upload of File with Dangerous Type vulnerability in Mobatime web application (Documentary proof upload modules) allows a malicious user to Upload… |