CVE-2022-45637

An insecure password reset issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 service via insecure expiry mechanism.

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.77% chance of exploitation in the next 30 days, 55th percentile

Published

2023-03-21

Updated

2025-02-26

Proof-of-concept exploits (2)

• ReversecLabs/megafeis-palm3★ · 2023-03-20
• WithSecureLabs/megafeis-palm3★ · 2023-03-20

Security advisories

• WithSecureLabs/megafeis-palm/tree/main/CVE-2022-45637

References

• CVE Record
• NVD entry

Related

• CVE-2021-25374
• CVE-2024-31903
• CVE-2022-45634
• CVE-2022-45635
• CVE-2022-45636