CVE-2022-31462: Owllabs Meeting Owl Pro Firmware

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Owl Labs Meeting Owl 5.2.0.15 allows attackers to control the device via a backdoor password (derived from the serial number) that can be found in Bluetooth broadcast data.

Affected products

  • Owllabs Meeting Owl Pro Firmware: before 5.4.2.3 (fixed in 5.4.2.3)

Published 2022-06-02. Last modified 2026-06-17.