CVE-2022-31460

HIGH IN THE WILD

Owl Labs Meeting Owl <5.2.0.15 - Code Injection

Title source: llm

CVE-2022-31460 has been observed exploited in the wild (reported by InTheWild.io).

Owl Labs Meeting Owl 5.2.0.15 allows attackers to activate Tethering Mode with hard-coded hoothoot credentials via a certain c 150 value.

Core 3

Core References

Third Party Advisory x_refsource_misc

Exploit, Third Party Advisory x_refsource_misc

Release Notes, Vendor Advisory x_refsource_misc

CVSS v3 7.4

EPSS 0.0341

EPSS Percentile 87.3%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

InTheWild.io 2022-06-08

CWE

CWE-798

Status published

Products (1)

owllabs/meeting_owl_pro_firmware < 5.4.2.3

Published Jun 02, 2022

Tracked Since Feb 18, 2026