Security Advisory

CVE-2025-2407

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-05-27 07:52:40
Last updated 2025-05-27 13:59:38
Assigner NCSC.ch
CVSS score 9.3
State PUBLISHED

Description

Missing Authentication & Authorization in Web-API in Mobatime AMX MTAPI v6 on IIS allows adversaries to unrestricted access via the network. The vulnerability is fixed in Version 1.5.