CVE-2022-45636: Megafeis Bofei Dbd+

High severity, CVSS 8.1. EPSS: 0.7% chance of exploitation in the next 30 days.

An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows attacker to unlock model(s) without authorization via arbitrary API requests.

Affected products

• Megafeis Bofei Dbd+: version 1.4.3 only; version 1.4.4 only

Published 2023-03-21. Last modified 2026-06-17.