Owl Labs Meeting Owl Trust Management Issue Vulnerability (CNVD-2022-64973)

Owl Labs Meeting Owl is a video conferencing device from Owl Labs, Inc. Featuring an array of cameras and microphones that capture 360-degree video and audio and automatically focus on the speaker to make meetings more dynamic and inclusive, Owl Labs Meeting Owl version 5.2.0.15 is vulnerable to a trust management issue that could be exploited by an attacker to take control of the device via a backdoor password (derived from the serial number) found in Bluetooth broadcast data.