CVE-2022-31460

Name of the Vulnerable Software and Affected Versions Owl Labs Meeting Owl version 5.2.0.15

Description The issue is related to the use of hardcoded credentials in the camera's firmware, allowing a remote attacker to activate "tethering Mode" and escalate their privileges. The exploitation involves using a certain c 150 value with the hard-coded hoohoot credentials.

Recommendations For version 5.2.0.15, consider disabling the tethering Mode feature until a patch is available to prevent potential exploitation. Restrict access to the camera's firmware to minimize the risk of unauthorized privilege escalation. Avoid using the hard-coded hoohoot credentials in the affected API endpoint until the issue is resolved.