Описание
An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows attacker to unlock model(s) without authorization via arbitrary API requests.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:megafeis:bofei_dbd\+:1.4.3:*:*:*:*:iphone_os:*:*
cpe:2.3:a:megafeis:bofei_dbd\+:1.4.4:*:*:*:*:android:*:*
EPSS
Процентиль: 38%
0.00164
Низкий
8.1 High
CVSS3
Дефекты
CWE-862
CWE-862
Связанные уязвимости
CVSS3: 8.1
github
почти 3 года назад
An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows attacker to unlock model(s) without authorization via arbitrary API requests.
EPSS
Процентиль: 38%
0.00164
Низкий
8.1 High
CVSS3
Дефекты
CWE-862
CWE-862