NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

VulnerabilityPoC4

CVE-2022-31462

CVSS 3.1: 8.8 high
EPSS: <1%p57
Published: Jun 2, 2022 · Jun 2, 2022
Modified: Jun 17, 2026

Analyze CVE-2022-31462 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Owl Labs Meeting Owl 5.2.0.15 allows attackers to control the device via a backdoor password (derived from the serial number) that can be found in Bluetooth broadcast data.

Vendors: owllabs

Products: meeting owl pro firmware

Weakness: CWE-798

Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news

3 stories

Trend Micro Releases Urgent Fix for Actively Exploited Critical Security Vulnerability

The Hacker NewsOct 9, 06:46 UTC · Oct 9, 2023VulnerabilityExploitedCVE-2023-41179 CVE-2014-8361 CVE-2017-6884+91 · 1 read

60

CISA Warns of Active Exploitation of JetBrains and Windows Vulnerabilities

The Hacker NewsOct 5, 09:30 UTC · Oct 5, 2023VulnerabilityExploitedCVE-2023-42793 CVE-2023-28229 CVE-2022-31460+42 · 1 read

60

CISA adds Owl Labs, Samsung, Realtek bugs to exploited vulnerability list

The RecordSep 21, 13:46 UTC · Sep 21, 2023VulnerabilityExploitedCVE-2022-31459 CVE-2022-31461 CVE-2022-31462+22 · 1 read

60