Vulnerabilities

TI-2022-22513 CVE-2022-45637 · GHSA-7r43-v6hm-qrjh

An insecure password reset issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS &…

HIGH 82

An insecure password reset issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 service via insecure expiry mechanism.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00771 Published 2023-03-21 No fix listed CWE-640

TI-2022-22512 CVE-2022-45636 · GHSA-93fv-965w-2985

An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows…

HIGH 70

An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows attacker to unlock model(s) without authorization via arbitrary API requests.

CVSS 3.1HIGH 8.1 Adjacent network No auth No interaction EPSS 0.00688 Published 2023-03-21 No fix listed CWE-862

TI-2022-22511 CVE-2022-45635 · GHSA-9q9p-jxqv-h77m

An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows…

HIGH 72

An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows attacker to gain access to sensitive account information via insecure password policy.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00783 Published 2023-03-21 No fix listed CWE-521

Vulnerabilities

Filters

An insecure password reset issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS &…

An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows…

An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows…