cve/2022/CVE-2022-45637.md

### [CVE-2022-45637](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45637)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

An insecure password reset issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 service via insecure expiry mechanism.

### POC

#### Reference
- https://github.com/WithSecureLabs/megafeis-palm/tree/main/CVE-2022-45637

#### Github
- https://github.com/ARPSyndicate/cvemon
- https://github.com/WithSecureLabs/megafeis-palm