CVE-2022-31461

The CVE-2022-31461 issue affects Owl Labs Meeting Owl 5.2.0.15, where an attacker in proximity can deactivate the device’s passcode protection by sending a specific BLE/companion-app message, effectively bypassing authentication. Root cause is a bypass of the passcode mechanism via a crafted mess...

CVE-2022-31461

Owl Labs Meeting Owl 5.2.0.15 allows attackers to deactivate the passcode protection mechanism via a certain c 11 message...

CVE-2022-31462

Owl Labs Meeting Owl 5.2.0.15 allows attackers to control the device via a backdoor password derived from the serial number that can be found in Bluetooth broadcast data...

CVE-2022-31462

CVE-2022-31462 affects Owl Labs Meeting Owl 5.2.0.15. The root issue is a backdoor passcode vulnerability: a hardcoded passcode, derived from the device serial number, is broadcast via BLE as part of the device name, enabling a nearby attacker to gain control of the device. Related documentation ...

CVE-2022-31463

CVE-2022-31463 affects Owl Labs Meeting Owl 5.2.0.15, where Bluetooth commands are authenticated only on the client side, allowing a nearby attacker to control the device and potentially disable passcodes. Exploitation details are not provided in the sources; the risk is described as an authoriza...

CVE-2022-31463

Owl Labs Meeting Owl 5.2.0.15 does not require a password for Bluetooth commands, because only client-side authentication is used...

CVE-2022-31460

Owl Labs Meeting Owl 5.2.0.15 allows attackers to activate Tethering Mode with hard-coded hoothoot credentials via a certain c 150 value...

CVE-2022-31460

CVE-2022-31460 affects Owl Labs Meeting Owl Pro and Whiteboard Owl devices (version 5.2.0.15). The issue enables activation of Tethering Mode using hard-coded hoothoot credentials, via a specific value, allowing an attacker in proximity to cause the device to expose a rogue access point and poten...

CVE-2022-29236

BigBlueButton is an open source web conferencing system. Starting in version 2.2 and prior to versions 2.3.18 and 2.4-rc-6, an attacker can circumvent access restrictions for drawing on the whiteboard. The permission check is inadvertently skipped on the server, due to a previously introduced gra...

CVE-2022-29235

BigBlueButton is an open source web conferencing system. Starting in version 2.2 and prior to versions 2.3.18 and 2.4-rc-6, an attacker who is able to obtain the meeting identifier for a meeting on a server can find information related to an external video being shared, like the current timestamp...

Code injection

BigBlueButton is an open source web conferencing system. Starting in version 2.2 and prior to versions 2.3.18 and 2.4-rc-6, an attacker can circumvent access restrictions for drawing on the whiteboard. The permission check is inadvertently skipped on the server, due to a previously introduced gra...

Owl Labs Meeting Owl 信任管理问题漏洞

Owl Labs Meeting Owl is a video conferencing device from Owl Labs, Inc. Featuring an array of cameras and microphones that capture 360-degree video and audio and automatically focus on the speaker to make meetings more dynamic and inclusive, Owl Labs Meeting Owl version 5.2.0.15 is vulnerable to ...

Owl Labs Meeting Owl 信任管理问题漏洞

Owl Labs Meeting Owl is a video conferencing device from Owl Labs, Inc. Owl Labs Meeting Owl version 5.2.0.15 is vulnerable to a trust management issue, which could be exploited by an attacker to activate network sharing mode using hard-coded hoothoot credentials via a certain c 150 value...

Owl Labs Meeting Owl 加密问题漏洞

Owl Labs Meeting Owl is a video conferencing device from Owl Labs, Inc. Equipped with a series of cameras and microphones, it captures 360-degree video and audio and automatically focuses on the speaker, making meetings more dynamic and inclusive.Owl Labs Meeting Owl version 5.2.0.15 contains an...

Owl Labs Meeting Owl 访问控制错误漏洞

Owl Labs Meeting Owl is a video conferencing device from Owl Labs, Inc. Featuring a series of cameras and microphones that capture 360-degree video and audio and automatically focus on the speaker, making meetings more dynamic and inclusive, Owl Labs Meeting Owl version 5.2.0.15 is vulnerable to ...

Owl Labs Meeting Owl 授权问题漏洞

Owl Labs Meeting Owl is a video conferencing device from Owl Labs, Inc. Equipped with an array of cameras and microphones, it captures 360-degree video and audio and automatically focuses on the speaker, making meetings more dynamic and inclusive.Owl Labs Meeting Owl version 5.2.0.15 is vulnerabl...

PT-2022-19485 · Unknown · Bigbluebutton

Name of the Vulnerable Software and Affected Versions: BigBlueButton versions 2.2 through 2.3.17 BigBlueButton versions 2.4-rc-1 through 2.4-rc-5 Description: BigBlueButton is an open source web conferencing system. An attacker who is able to obtain the meeting identifier for a meeting on a serve...

PT-2022-19484 · Unknown · Bigbluebutton

Name of the Vulnerable Software and Affected Versions: BigBlueButton versions 2.2 through 2.3.17 BigBlueButton versions 2.4.0 Description: BigBlueButton is an open source web conferencing system. An attacker, who needs to be a participant in the meeting, could send messages to a locked chat withi...

PT-2022-19486 · Unknown · Bigbluebutton

Name of the Vulnerable Software and Affected Versions: BigBlueButton versions 2.2 through 2.3.17 BigBlueButton versions 2.4-rc-1 through 2.4-rc-5 Description: BigBlueButton is an open source web conferencing system. An attacker can circumvent access restrictions for drawing on the whiteboard. The...

BigBlueButton 信息泄露漏洞

BigBlueButton is an open source Web conferencing system from the BigBlueButton community.BigBlueButton suffers from an information disclosure vulnerability that stems from the lack of information protection measures and access controls for service meeting announcement chat messages.An attacker...