Vendors / Owllabs Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 4
Exploited now Owllabs records in CISA KEV No Owllabs vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 42
Owl Labs Meeting Owl 5.2.0.15 allows attackers to control the device via a backdoor password (derived from the serial number) that can be found in Bluetooth broadcast data.
CVSS 3.1 CRITICAL 9.3· Adjacent network · No auth · No interaction · EPSS 0.00815 · Published 2022-06-02 · No fix listed CWE-798
Priority LOW 38
Owl Labs Meeting Owl 5.2.0.15 does not require a password for Bluetooth commands, because only client-side authentication is used.
CVSS 3.1 HIGH 8.2· Adjacent network · No auth · No interaction · EPSS 0.00963 · Published 2022-06-02 · No fix listed CWE-287
Priority LOW 38
Owl Labs Meeting Owl 5.2.0.15 allows attackers to activate Tethering Mode with hard-coded hoothoot credentials via a certain c 150 value.
CVSS 3.1 HIGH 7.4· Adjacent network · No auth · No interaction · EPSS 0.03408 · Published 2022-06-02 · No fix listed CWE-798
Priority LOW 34
Owl Labs Meeting Owl 5.2.0.15 allows attackers to deactivate the passcode protection mechanism via a certain c 11 message.
CVSS 3.1 HIGH 7.4· Adjacent network · No auth · No interaction · EPSS 0.00825 · Published 2022-06-02 · No fix listed CWE-306
Priority LOW 34
Owl Labs Meeting Owl 5.2.0.15 allows attackers to retrieve the passcode hash via a certain c 10 value over Bluetooth.
CVSS 3.1 HIGH 7.4· Adjacent network · No auth · No interaction · EPSS 0.00787 · Published 2022-06-02 · No fix listed CWE-326
Open these records in search → All records by CVSS severity
1 4 0 0 0
THREATIST.IORead the docs