CVE-2022-31461

HIGH IN THE WILD

Owl Labs Meeting Owl <5.2.0.15 - Code Injection

Title source: llm

CVE-2022-31461 has been observed exploited in the wild (reported by InTheWild.io).

Owl Labs Meeting Owl 5.2.0.15 allows attackers to deactivate the passcode protection mechanism via a certain c 11 message.

Core 3

Core References

Third Party Advisory x_refsource_misc

Exploit, Third Party Advisory x_refsource_misc

Release Notes, Vendor Advisory x_refsource_misc

CVSS v3 7.4

EPSS 0.0083

EPSS Percentile 52.8%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

InTheWild.io 2023-09-18

CWE

CWE-306

Status published

Products (1)

owllabs/meeting_owl_pro_firmware < 5.4.2.3

Published Jun 02, 2022

Tracked Since Feb 18, 2026