CVE-2022-31459

CVE-2022-31459 describes a medium-severity vulnerability in Owl Labs Meeting Owl devices (firmware version 5.2.0.15 and potentially others) that allows an attacker to retrieve the passcode hash via a specific Bluetooth command. This vulnerability has a CVSS score of 6.5, indicating an adjacent network attack vector with low complexity and no user interaction required, leading to high confidentiality impact. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit or Nuclei, or entries in ExploitDB. Despite this, the vulnerability has garnered some community discussion and media coverage, suggesting awareness within the cybersecurity community.