GCVE - cpe:2.3:o:owllabs:meeting_owl_pro_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:owllabs:meeting_owl_pro_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Owllabs (`00f7f5d3-d592-540d-98de-4fdb2244c362`)
Product	Meeting Owl Pro Firmware (`6ff2204f-426e-5eab-b239-aeb6df6c1034`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-31463`	vulnerable	2026-06-08 05:43:40.786509	Details available HIGH (8.2) Owl Labs Meeting Owl 5.2.0.15 does not require a password for Bluetooth commands, because only client-side authentication is used. Published: 2022-06-02T21:39:52.000Z Updated: 2024-08-03T07:19:05.768Z Open on db.gcve.eu Reference links https://arstechnica.com/information-technology/2022/06/vulnerabilities-in-meeting-owl-videoconference-device-imperil-100k-users/ https://www.modzero.com/static/meetingowl/Meeting_Owl_Pro_Security_Disclosure_Report_RELEASE.pdf https://resources.owllabs.com/blog/owl-labs-update	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-31462`	vulnerable	2026-06-08 05:43:40.786031	Details available CRITICAL (9.3) Owl Labs Meeting Owl 5.2.0.15 allows attackers to control the device via a backdoor password (derived from the serial number) that can be found in Bluetooth broadcast data. Published: 2022-06-02T21:40:16.000Z Updated: 2024-08-03T07:19:05.738Z Open on db.gcve.eu Reference links https://arstechnica.com/information-technology/2022/06/vulnerabilities-in-meeting-owl-videoconference-device-imperil-100k-users/ https://www.modzero.com/static/meetingowl/Meeting_Owl_Pro_Security_Disclosure_Report_RELEASE.pdf https://resources.owllabs.com/blog/owl-labs-update	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-31461`	vulnerable	2026-06-08 05:43:40.785464	Details available HIGH (7.4) Owl Labs Meeting Owl 5.2.0.15 allows attackers to deactivate the passcode protection mechanism via a certain c 11 message. Published: 2022-06-02T21:40:27.000Z Updated: 2024-08-03T07:19:06.068Z Open on db.gcve.eu Reference links https://arstechnica.com/information-technology/2022/06/vulnerabilities-in-meeting-owl-videoconference-device-imperil-100k-users/ https://www.modzero.com/static/meetingowl/Meeting_Owl_Pro_Security_Disclosure_Report_RELEASE.pdf https://resources.owllabs.com/blog/owl-labs-update	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-31460`	vulnerable	2026-06-08 05:43:40.784942	Details available HIGH (7.4) Owl Labs Meeting Owl 5.2.0.15 allows attackers to activate Tethering Mode with hard-coded hoothoot credentials via a certain c 150 value. Published: 2022-06-02T21:39:38.000Z Updated: 2024-08-03T07:19:05.702Z Open on db.gcve.eu Reference links https://arstechnica.com/information-technology/2022/06/vulnerabilities-in-meeting-owl-videoconference-device-imperil-100k-users/ https://www.modzero.com/static/meetingowl/Meeting_Owl_Pro_Security_Disclosure_Report_RELEASE.pdf https://resources.owllabs.com/blog/owl-labs-update	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-31459`	vulnerable	2026-06-08 05:43:40.783701	Details available HIGH (7.4) Owl Labs Meeting Owl 5.2.0.15 allows attackers to retrieve the passcode hash via a certain c 10 value over Bluetooth. Published: 2022-06-02T21:40:39.000Z Updated: 2024-08-03T07:19:05.807Z Open on db.gcve.eu Reference links https://arstechnica.com/information-technology/2022/06/vulnerabilities-in-meeting-owl-videoconference-device-imperil-100k-users/ https://www.modzero.com/static/meetingowl/Meeting_Owl_Pro_Security_Disclosure_Report_RELEASE.pdf https://resources.owllabs.com/blog/owl-labs-update	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.