CVE-2022-31462

PoC —

CVSS 3.1

8.8 high

EPSS

<1%p57

Published

Jun 2, 2022 (Jun 2, 2022)

Modified

Jun 17, 2026

Description

Owl Labs Meeting Owl 5.2.0.15 allows attackers to control the device via a backdoor password (derived from the serial number) that can be found in Bluetooth broadcast data.

Vendors: owllabs
Products: meeting owl pro firmware
Weakness: CWE-798
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news3 stories

Trend Micro Releases Urgent Fix for Actively Exploited Critical Security Vulnerability

The Hacker NewsOct 9, 06:46 UTC · Oct 9, 2023Vulnerability in the wildCVE-2023-41179 CVE-2014-8361 CVE-2017-6884+9 CVEs

CISA Warns of Active Exploitation of JetBrains and Windows Vulnerabilities

The Hacker NewsOct 5, 09:30 UTC · Oct 5, 2023Vulnerability in the wildCVE-2023-42793 CVE-2023-28229 CVE-2022-31460+4 CVEs1

CISA adds Owl Labs, Samsung, Realtek bugs to exploited vulnerability list

The RecordSep 21, 13:46 UTC · Sep 21, 2023Vulnerability in the wildCVE-2022-31459 CVE-2022-31461 CVE-2022-31462+2 CVEs