What is CVE-2022-31460?

CVE-2022-31460 is a vulnerability found in Owl Labs Meeting Owl Pro and Whiteboard Owl devices that allows attackers to activate Tethering Mode using hard-coded hoothoot credentials.

How does the CVE-2022-31460 vulnerability work?

The CVE-2022-31460 vulnerability allows attackers to activate Tethering Mode on Meeting Owl Pro and Whiteboard Owl devices by using specific credentials.

What is the severity of CVE-2022-31460?

CVE-2022-31460 has a severity rating of 7.4 (high).

How can I fix the CVE-2022-31460 vulnerability?

To fix the CVE-2022-31460 vulnerability, make sure to update the Meeting Owl Pro firmware to version 5.4.2.3 or newer.

Where can I find more information about CVE-2022-31460?

You can find more information about CVE-2022-31460 in the references provided: 1. [Ars Technica](https://arstechnica.com/information-technology/2022/06/vulnerabilities-in-meeting-owl-videoconference-device-imperil-100k-users/) 2. [Owl Labs Blog](https://resources.owllabs.com/blog/owl-labs-update) 3. [Modzero Security Disclosure Report](https://www.modzero.com/static/meetingowl/Meeting_Owl_Pro_Security_Disclosure_Report_RELEASE.pdf)

Vulnerability/
CVE-2022-31460

Exploited

high

7.4

CWE

798

2/6/2022

3/8/2024

CVE-2022-31460: Meeting Owl Pro and Whiteboard Owl Hard-Coded Credentials Vulnerability

First published: Thu Jun 02 2022(Updated: )

Owl Labs Meeting Owl and Whiteboard Owl allow attackers to activate Tethering Mode with hard-coded hoothoot credentials via a certain c 150 value.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Owl Labs Meeting Owl Pro and Whiteboard Owl
Owllabs Meeting Owl Pro Firmware	<5.4.2.3
Owllabs Meeting Owl Pro

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is CVE-2022-31460?
CVE-2022-31460 is a vulnerability found in Owl Labs Meeting Owl Pro and Whiteboard Owl devices that allows attackers to activate Tethering Mode using hard-coded hoothoot credentials.
How does the CVE-2022-31460 vulnerability work?
The CVE-2022-31460 vulnerability allows attackers to activate Tethering Mode on Meeting Owl Pro and Whiteboard Owl devices by using specific credentials.
What is the severity of CVE-2022-31460?
CVE-2022-31460 has a severity rating of 7.4 (high).
How can I fix the CVE-2022-31460 vulnerability?
To fix the CVE-2022-31460 vulnerability, make sure to update the Meeting Owl Pro firmware to version 5.4.2.3 or newer.
Where can I find more information about CVE-2022-31460?
You can find more information about CVE-2022-31460 in the references provided: 1. [Ars Technica](https://arstechnica.com/information-technology/2022/06/vulnerabilities-in-meeting-owl-videoconference-device-imperil-100k-users/) 2. [Owl Labs Blog](https://resources.owllabs.com/blog/owl-labs-update) 3. [Modzero Security Disclosure Report](https://www.modzero.com/static/meetingowl/Meeting_Owl_Pro_Security_Disclosure_Report_RELEASE.pdf)

exploited/true
collector/cisa-known-exploited
collector/nvd-index
agent/type
agent/description
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/weakness
agent/last-modified-date
agent/references
agent/severity
agent/author
agent/title
agent/tags
agent/first-publish-date
agent/event
agent/source
vendor/owl labs
canonical/owl labs meeting owl pro and whiteboard owl
vendor/owllabs
canonical/owllabs meeting owl pro firmware
canonical/owllabs meeting owl pro

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.