CVE-2022-31463: Owl Labs Meeting Owl Improper Authentication Vulnerability
First published: Thu Jun 02 2022(Updated: )
Owl Labs Meeting Owl contains an improper authentication vulnerability that does not require a password for Bluetooth commands, as only client-side authentication is used.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Owl Labs Meeting Owl | ||
| Owllabs Meeting Owl Pro Firmware | <5.4.2.3 | |
| Owllabs Meeting Owl Pro Firmware |
Remedy
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-31463?
CVE-2022-31463 is an improper authentication vulnerability in Owl Labs Meeting Owl.
How does CVE-2022-31463 affect Owl Labs Meeting Owl?
CVE-2022-31463 allows unauthorized access to Owl Labs Meeting Owl through Bluetooth commands without needing a password.
Is a password required for Bluetooth commands in Owl Labs Meeting Owl?
No, Owl Labs Meeting Owl does not require a password for Bluetooth commands, which can pose a security risk.
What authentication method is used in Owl Labs Meeting Owl?
Owl Labs Meeting Owl only uses client-side authentication, which is insufficient for securing Bluetooth commands.
How can I fix the improper authentication vulnerability in Owl Labs Meeting Owl?
To fix the improper authentication vulnerability in Owl Labs Meeting Owl, it is recommended to install the latest firmware or software updates provided by the vendor.
- exploited/true
- collector/cisa-known-exploited
- agent/type
- agent/description
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/references
- agent/severity
- agent/remedy
- agent/author
- agent/title
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/owl labs
- canonical/owl labs meeting owl
- vendor/owllabs
- canonical/owllabs meeting owl pro firmware