Lucene search

Bofei Dbd+ Security Vulnerabilities

cve

CVE-2022-45635

An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows attacker to gain access to sensitive account information via insecure password policy.

7.5CVSS

7.5AI Score

0.002EPSS

2023-03-21 04:15 PM

cve

CVE-2022-45636

An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows attacker to unlock model(s) without authorization via arbitrary API requests.

8.1CVSS

7.9AI Score

0.001EPSS

2023-03-21 06:15 PM

cve

CVE-2022-45637

An insecure password reset issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 service via insecure expiry mechanism.

9.8CVSS

9.2AI Score

0.002EPSS

2023-03-21 04:15 PM