Bofei Dbd+ vulnerabilities

2 known vulnerabilities in Bofei Dbd+ from Megafeis. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Bofei Dbd+: Missing Authorization

  CVE-2022-45636Mar 21, 2023Megafeis

  An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows attacker to unlock model(s) without authorization via arbitrary API requests.

• 7.5 High severity

  Bofei Dbd+: Weak Password Requirements

  CVE-2022-45635Mar 21, 2023Megafeis

  An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows attacker to gain access to sensitive account information via insecure password policy.