CVE-2023-3066

HighCVSS 8.1

Published: 05/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.59%

43th percentile - higher than 43% of all known CVEs

Summary

The Mobatime mobile application AMXGT100 has an incorrect authorization vulnerability that allows a low-privileged user to impersonate anyone else, including administrators.

Risk Assessment

This vulnerability could lead to unauthorized access to administrator accounts, posing a serious threat to data and system security.

Recommendation

It is recommended to update the Mobatime AMXGT100 application to the latest version to mitigate this vulnerability and review user authorization policies.

Other vulnerabilities in Mobatime mobile application AMXGT100

CVE-2023-3065Critical
The Mobatime mobile application AMXGT100 has an improper authentication vulnerability that allows authentication bypass. This issue affects the application version up to 1.3.20.

Original NVD description (English source)

Incorrect Authorization vulnerability in Mobatime mobile application AMXGT100 allows a low-privileged user to impersonate anyone else, including administratorsThis issue affects Mobatime mobile application AMXGT100: through 1.3.20.