CVE-2022-31460

Owl Labs Meeting Owl 5.2.0.15 allows attackers to activate Tethering Mode with hard-coded hoothoot credentials via a certain c 150 value...

CVE-2022-31460

Owl Labs Meeting Owl 5.2.0.15 allows attackers to activate Tethering Mode with hard-coded hoothoot credentials via a certain c 150 value...

CVE-2022-31462

Owl Labs Meeting Owl 5.2.0.15 allows attackers to control the device via a backdoor password derived from the serial number that can be found in Bluetooth broadcast data...

CVE-2022-31459

Owl Labs Meeting Owl 5.2.0.15 allows attackers to retrieve the passcode hash via a certain c 10 value over Bluetooth...

CVE-2022-31461

Owl Labs Meeting Owl 5.2.0.15 allows attackers to deactivate the passcode protection mechanism via a certain c 11 message...

CVE-2022-31459

Owl Labs Meeting Owl 5.2.0.15 allows attackers to retrieve the passcode hash via a certain c 10 value over Bluetooth...

CVE-2022-31459

Owl Labs Meeting Owl 5.2.0.15 allows attackers to retrieve the passcode hash via a certain c 10 value over Bluetooth...

CVE-2022-31461

Owl Labs Meeting Owl 5.2.0.15 allows attackers to deactivate the passcode protection mechanism via a certain c 11 message...

Authentication flaw

Owl Labs Meeting Owl 5.2.0.15 does not require a password for Bluetooth commands, because only client-side authentication is used...

Design/Logic Flaw

Owl Labs Meeting Owl 5.2.0.15 allows attackers to control the device via a backdoor password derived from the serial number that can be found in Bluetooth broadcast data...

Code injection

Owl Labs Meeting Owl 5.2.0.15 allows attackers to retrieve the passcode hash via a certain c 10 value over Bluetooth...

Hardcoded credentials

Owl Labs Meeting Owl 5.2.0.15 allows attackers to activate Tethering Mode with hard-coded hoothoot credentials via a certain c 150 value...

Code injection

Owl Labs Meeting Owl 5.2.0.15 allows attackers to deactivate the passcode protection mechanism via a certain c 11 message...

CVE-2022-31459

CVE-2022-31459 affects Owl Labs Meeting Owl 5.2.0.15 and describes an information-disclosure vulnerability where an attacker can retrieve the passcode hash over Bluetooth Low Energy. The vulnerability stems from weak data exposure (passcode hash) via a BLE endpoint, enabling potential offline bru...

CVE-2022-31459

Owl Labs Meeting Owl 5.2.0.15 allows attackers to retrieve the passcode hash via a certain c 10 value over Bluetooth...

CVE-2022-31461

Owl Labs Meeting Owl 5.2.0.15 allows attackers to deactivate the passcode protection mechanism via a certain c 11 message...

CVE-2022-31461

The CVE-2022-31461 issue affects Owl Labs Meeting Owl 5.2.0.15, where an attacker in proximity can deactivate the device’s passcode protection by sending a specific BLE/companion-app message, effectively bypassing authentication. Root cause is a bypass of the passcode mechanism via a crafted mess...

CVE-2022-31462

CVE-2022-31462 affects Owl Labs Meeting Owl 5.2.0.15. The root issue is a backdoor passcode vulnerability: a hardcoded passcode, derived from the device serial number, is broadcast via BLE as part of the device name, enabling a nearby attacker to gain control of the device. Related documentation ...

CVE-2022-31462

Owl Labs Meeting Owl 5.2.0.15 allows attackers to control the device via a backdoor password derived from the serial number that can be found in Bluetooth broadcast data...

CVE-2022-31463

CVE-2022-31463 affects Owl Labs Meeting Owl 5.2.0.15, where Bluetooth commands are authenticated only on the client side, allowing a nearby attacker to control the device and potentially disable passcodes. Exploitation details are not provided in the sources; the risk is described as an authoriza...