Modzero researchers say Meeting Owl devices can be used as rogue wireless network gateways to connect to a local business network via Bluetooth, and malicious users can use the gadget to access owners' local networks.
Critical Security Flaws Seen in Owl Labs Meeting Owl Products
The third iteration of Owl Labs' primary product, the Meeting Owl 3, has been launched. However, the release lost some significance due to recent discoveries concerning security concerns inside the Owl Labs ecosystem.
A report from Ars Technica on June 2 brought to light a security evaluation by the Swiss-German consultancy Modzero, which identified a number of severe security flaws in the whole range of Owl Labs Meeting Owl products.
Researchers from Modzero claim that anybody may utilize Meeting Owl devices as rogue wireless network gateways to connect to a local business network through Bluetooth. The gadget may be used maliciously to get access to the Meeting Owl Pro owners' local network.
Modzero also found the backend infrastructure's connectivity and authentication problems. This covers both the conventional HTTP(S)-based API communication and the MQTT services hosted by Amazon Web Services (AWS).
The report's summary concluded that although this product line's operating characteristics are intriguing, Modzero does not advise employing them until practical solutions have been implemented.
A user cannot entirely disable the network and Bluetooth functions. The Meeting Owl is not recommended even for solo use, in which case it would only serve as a USB camera. Attackers may activate network connectivity and get access to vital IPC (Inter-Process Communication) channels by coming within Bluetooth's proximity range.
Owl Labs is not the first IoT firm to find security flaws in its products, and it most likely won't be the last either. The corporation should have increased security, however, given the success of its products (notably the Meeting Owl) and the makeup of its clientele, which includes numerous government and educational institutions.
Read Also : Fourth of July Shooting: GoFundMe For the Boy Who Lost Both Parents Gathers $1.8 Million
What does Owl Meeting 3 Offer? | Find Out Here
Like previous versions, participants receive a 360-degree panoramic image of a Meeting Owl-equipped room and up to three panels focusing on speaking or moving attendees. The Meeting Owl 3 has a USB-C rather than a Micro-USB connection to a host PC and an HDMI-connected Expansion Mic to expand the audio range. Its upgraded OIS (Owl Intelligence System) software adds user-experience features.
The Meeting Owl 3 resembles the Meeting Owl Pro from the second generation in appearance and feel. Additionally, it is a grey, 111-meter-diameter cylinder with a little taper topped with a 360-degree 1080p camera. This new version has eight omnidirectional beam-forming microphones, three speakers, and controls at the bottom.
Around the base are mute, volume up/down, and Presenter Enhance buttons. Its power and PC connectors are on the underside. This 1.2kg device stands 273mm tall and has two LEDs at the top, divided by a 'beak' with the company's name.
Furthermore, Meeting Owl 3 hardware has two upgrades. Micro-HDMI port in base, below volume controls. This is for attaching the puck-shaped Expansion Mic, which extends the audio pickup range from 5.5m (18ft) to 8m (26ft). A mute button in its Expansion Mic is also available.
Currently, the Meeting Owl 3 costs $999 in the US, while the Expansion Mic costs $249. The Meeting Owl 3 goes on sale today in the UK and Europe, where it will cost £1,049 / €1,149 ($1244 / $1363). The Expansion Mic will cost you £249 / £275 ($295 / $326).
