CyberSecBulletin

Megafeis vulnerabilities

We track 2 vulnerabilities in Megafeis products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 21, 2023.

2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score

Latest Megafeis vulnerabilities

  • 8.1 High severity

    Bofei Dbd+: Missing Authorization

    CVE-2022-45636Megafeis

    An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows attacker to unlock model(s) without authorization via arbitrary API requests.

  • 7.5 High severity

    Bofei Dbd+: Weak Password Requirements

    CVE-2022-45635Megafeis

    An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows attacker to gain access to sensitive account information via insecure password policy.