Megafeis

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Megafeis records in CISA KEV

No Megafeis vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Bofei Dbd+ 3 records HIGH

Records

3 records in Bofei Dbd+ · all components

TI-2022-22513 CVE-2022-45637 · GHSA-7r43-v6hm-qrjh

An insecure password reset issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS &…

HIGH 82

An insecure password reset issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 service via insecure expiry mechanism.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00771 Published 2023-03-21 No fix listed CWE-640

TI-2022-22511 CVE-2022-45635 · GHSA-9q9p-jxqv-h77m

An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows…

HIGH 72

An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows attacker to gain access to sensitive account information via insecure password policy.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00783 Published 2023-03-21 No fix listed CWE-521

TI-2022-22512 CVE-2022-45636 · GHSA-93fv-965w-2985

An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows…

HIGH 70

An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows attacker to unlock model(s) without authorization via arbitrary API requests.

CVSS 3.1HIGH 8.1 Adjacent network No auth No interaction EPSS 0.00688 Published 2023-03-21 No fix listed CWE-862

Open these records in search →

Critical	1
High	2
Medium	0
Low	0
No CVSS	0