Lucene search
+L

538 matches found

OSV
OSV
added 2022/06/02 10:15 p.m.5 views

CVE-2022-31461

Owl Labs Meeting Owl 5.2.0.15 allows attackers to deactivate the passcode protection mechanism via a certain c 11 message...

6.5CVSS7.2AI score0.00885EPSS
SaveExploits1References3
Prion
Prion
added 2022/06/02 10:15 p.m.32 views

Code injection

Owl Labs Meeting Owl 5.2.0.15 allows attackers to retrieve the passcode hash via a certain c 10 value over Bluetooth...

3.3CVSS6.6AI score0.00844EPSS
SaveExploits1References3Affected Software1
Prion
Prion
added 2022/06/02 10:15 p.m.35 views

Code injection

Owl Labs Meeting Owl 5.2.0.15 allows attackers to deactivate the passcode protection mechanism via a certain c 11 message...

3.3CVSS6.6AI score0.00885EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2022/06/02 9:40 p.m.257 views

CVE-2022-31459

CVE-2022-31459 affects Owl Labs Meeting Owl 5.2.0.15 and describes an information-disclosure vulnerability where an attacker can retrieve the passcode hash over Bluetooth Low Energy. The vulnerability stems from weak data exposure (passcode hash) via a BLE endpoint, enabling potential offline bru...

7.4CVSS6.9AI score0.00844EPSS
SaveIn wildExploits1References3Affected Software1
Cvelist
Cvelist
added 2022/06/02 9:40 p.m.35 views

CVE-2022-31459

Owl Labs Meeting Owl 5.2.0.15 allows attackers to retrieve the passcode hash via a certain c 10 value over Bluetooth...

7.4CVSS7.5AI score0.00844EPSS
SaveExploits1References3
CVE
CVE
added 2022/06/02 9:40 p.m.286 views

CVE-2022-31461

The CVE-2022-31461 issue affects Owl Labs Meeting Owl 5.2.0.15, where an attacker in proximity can deactivate the device’s passcode protection by sending a specific BLE/companion-app message, effectively bypassing authentication. Root cause is a bypass of the passcode mechanism via a crafted mess...

7.4CVSS6.9AI score0.00885EPSS
SaveIn wildExploits1References3Affected Software1
Cvelist
Cvelist
added 2022/06/02 9:40 p.m.40 views

CVE-2022-31461

Owl Labs Meeting Owl 5.2.0.15 allows attackers to deactivate the passcode protection mechanism via a certain c 11 message...

7.4CVSS7.5AI score0.00885EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/06/02 12:0 a.m.10 views

PT-2022-3409 · Owl · Owl Labs Meeting Owl

Name of the Vulnerable Software and Affected Versions: Owl Labs Meeting Owl version 5.2.0.15 Description: The issue is related to insufficient authentication procedure in the camera's firmware, allowing a remote attacker to bypass existing security restrictions. Specifically, it allows attackers ...

7.4CVSS7.5AI score0.00885EPSS
SaveExploits1References13
NVD
NVD
added 2022/03/18 6:15 p.m.32 views

CVE-2022-22642

This issue was addressed with improved checks. This issue is fixed in iOS 15.4 and iPadOS 15.4. A user may be able to bypass the Emergency SOS passcode prompt...

9.8CVSS0.01151EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/03/18 6:15 p.m.6 views

CVE-2022-22642

This issue was addressed with improved checks. This issue is fixed in iOS 15.4 and iPadOS 15.4. A user may be able to bypass the Emergency SOS passcode prompt...

9.8CVSS7.2AI score0.01151EPSS
SaveExploits0References2
OSV
OSV
added 2022/03/18 6:15 p.m.6 views

CVE-2022-22642

This issue was addressed with improved checks. This issue is fixed in iOS 15.4 and iPadOS 15.4. A user may be able to bypass the Emergency SOS passcode prompt...

9.8CVSS7.3AI score0.01151EPSS
SaveExploits0References1
NVD
NVD
added 2022/03/18 6:15 p.m.28 views

CVE-2022-22618

This issue was addressed with improved checks. This issue is fixed in watchOS 8.5, iOS 15.4 and iPadOS 15.4. A user may be able to bypass the Emergency SOS passcode prompt...

7.8CVSS0.00373EPSS
SaveExploits0References2
CVE
CVE
added 2022/03/18 5:59 p.m.105 views

CVE-2022-22618

CVE-2022-22618 concerns iOS/iPadOS/watchOS where the Emergency SOS passcode prompt could be bypassed. The Apple advisories attribute the issue to insufficient or inadequate checks, with the fix implemented in watchOS 8.5, iOS 15.4, and iPadOS 15.4. The vulnerability is discussed with references t...

7.8CVSS7.2AI score0.00373EPSS
SaveExploits0References2Affected Software3
NVD
NVD
added 2021/12/21 6:15 p.m.27 views

CVE-2021-27451

Mesa Labs AmegaView Versions 3.0 and prior’s passcode is generated by an easily reversible algorithm, which may allow an attacker to gain access to the device...

9.8CVSS0.00802EPSS
SaveExploits0References1
OSV
OSV
added 2021/12/21 6:15 p.m.5 views

CVE-2021-27451

Mesa Labs AmegaView Versions 3.0 and prior’s passcode is generated by an easily reversible algorithm, which may allow an attacker to gain access to the device...

9.8CVSS5.8AI score0.00802EPSS
SaveExploits0References1
Prion
Prion
added 2021/12/21 6:15 p.m.27 views

Design/Logic Flaw

Mesa Labs AmegaView Versions 3.0 and prior’s passcode is generated by an easily reversible algorithm, which may allow an attacker to gain access to the device...

7.5CVSS9.4AI score0.00802EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/12/21 5:55 p.m.52 views

CVE-2021-27451

Summary: CVE-2021-27451 affects MesaLabs AmegaView, versions 3.0 and earlier, where the passcode is generated by an easily reversible algorithm, potentially allowing an attacker to gain access to the device. The broader ICS-CERT advisory (I CS A-21-147-03) and associated NVD/NPP records describe ...

9.8CVSS8.6AI score0.00802EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2021/12/01 12:0 a.m.5 views

Wokka Lokka Q50 信息泄露漏洞

The Wokka Lokka Q50 is a children's smartwatch from Wokka Lokka USA. The Wokka Lokka Q50 suffers from an information disclosure vulnerability that originates from allowing a remote attacker knowing the SIM phone number and passcode to listen to the device's surroundings via callbacks in SMS...

9.3CVSS7.8AI score0.01041EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2021/10/22 12:0 a.m.5 views

PT-2021-7225 · Owl · Owl Labs Meeting Owl

Name of the Vulnerable Software and Affected Versions: Owl Labs Meeting Owl version 5.2.0.15 Description: The issue is related to the implementation of Bluetooth Low Energy BLE technology in the microprogram of the Meeting Owl Pro camera for video conferencing. It involves inadequate processing o...

7.4CVSS7.3AI score0.00844EPSS
SaveExploits1References15
Veracode
Veracode
added 2021/10/05 3:38 a.m.18 views

Secure Encryption Bypass

github.com/wireapp/wire-ios is vulnerable to bypass of secure encryption. Mandatory encryption at rest feature can be pypassed when the device passcode is disabled or is not set. The users will not be aware of inactivation of encryption at rest as the feature is hidden to them...

4.6CVSS1.7AI score0.00175EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder