CVE-2022-31463

PoC —

CVSS 3.1

7.1 high

EPSS

1%p62

Published

Jun 2, 2022 (Jun 2, 2022)

Modified

Jun 17, 2026

Description

Owl Labs Meeting Owl 5.2.0.15 does not require a password for Bluetooth commands, because only client-side authentication is used.

Vendors: owllabs
Products: meeting owl pro firmware
Weakness: CWE-287
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news3 stories

Trend Micro Releases Urgent Fix for Actively Exploited Critical Security Vulnerability

The Hacker NewsOct 9, 06:46 UTC · Oct 9, 2023Vulnerability in the wildCVE-2023-41179 CVE-2014-8361 CVE-2017-6884+9 CVEs

60

CISA Warns of Active Exploitation of JetBrains and Windows Vulnerabilities

The Hacker NewsOct 5, 09:30 UTC · Oct 5, 2023Vulnerability in the wildCVE-2023-42793 CVE-2023-28229 CVE-2022-31460+4 CVEs1

60

CISA adds Owl Labs, Samsung, Realtek bugs to exploited vulnerability list

The RecordSep 21, 13:46 UTC · Sep 21, 2023Vulnerability in the wildCVE-2022-31459 CVE-2022-31461 CVE-2022-31462+2 CVEs

60