CVE-2022-31459

HIGH IN THE WILD

Owl Labs Meeting Owl <5.2.0.15 - Info Disclosure

Title source: llm

CVE-2022-31459 has been observed exploited in the wild (reported by InTheWild.io).

Owl Labs Meeting Owl 5.2.0.15 allows attackers to retrieve the passcode hash via a certain c 10 value over Bluetooth.

Core 3

Core References

Third Party Advisory x_refsource_misc

Exploit, Third Party Advisory x_refsource_misc

Release Notes, Vendor Advisory x_refsource_misc

CVSS v3 7.4

EPSS 0.0079

EPSS Percentile 51.3%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

InTheWild.io 2023-09-18

CWE

CWE-326

Status published

Products (1)

owllabs/meeting_owl_pro_firmware < 5.4.2.3

Published Jun 02, 2022

Tracked Since Feb 18, 2026