The vulnerability identified as CVE-2025-30828 affects Arraytics Timetics up to version 1.0.29 and involves missing authorization controls. This results from incorrectly configured access control security levels, which could allow unauthorized users to perform actions that should require authorization. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low attack complexity, no privileges required, and no user interaction needed. The impact is limited to integrity, with no confidentiality or availability impact reported. No patch or official remediation information is currently available.

Exploitation of this vulnerability could allow an attacker to modify data or perform unauthorized actions within the affected Timetics application due to missing authorization checks. There is no reported impact on confidentiality or availability. No known exploits have been observed in the wild, indicating limited current exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should review and tighten access control configurations in Timetics to mitigate potential unauthorized access. Monitor vendor communications for updates regarding patches or official mitigations.