by Kastro
Paper/Archive/CVE-2022-31462

CVE-2022-31462

mitre — Owl Labs Meeting Owl 5.2.0.15 allows attackers to control the device via a backdoor password (derived from the serial number) that can be…

EPSS 0.8%CVSS 9.3
critical.is priorityof 100
39
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 57.1.571 × 2011.4No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Owl Labs Meeting Owl 5.2.0.15 allows attackers to control the device via a backdoor password (derived from the serial number) that can be found in Bluetooth broadcast data.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

mitre (CNA)9.3CVSS:3.1/AC:L/AV:A/A:N/C:H/I:H/PR:N/S:C/UI:N

References

refarstechnica.com/information-technology/2022/06/vulnerabilities-in-meeting-owl-videoconference-device-imperil-100k-usersrefmodzero.com/static/meetingowl/Meeting_Owl_Pro_Security_Disclosure_Report_RELEASE.pdfrefresources.owllabs.com/blog/owl-labs-update