CVE Feed

    Dashboard / CVE / CVE-2025-65821

    CVE-2025-65821

    As UART download mode is still enabled on the ESP32 chip on which the firmware runs, an adversary can dump the flash from the device and retrieve sensitive information such as details about the current and previous Wi-Fi network from the NVS partition. Additionally, this allows the adversary to reflash the device with their own firmware which may contain malicious modifications.

    Published:Dec 10, 2025
    Last Modified:Jan 21, 2026
    EPS:Dec 10, 2025
    EPSS Score:0.00045
    CVSS Score:7.5

    Affected Products

    Vendor
    Espressif
    Product
    Esp32
    Vendor
    Meatmeet
    Product
    Meatmeet Pro Wifi \& Bluetooth Meat Thermometer
    Vendor
    Meatmeet
    Product
    Meatmeet Pro Wifi \& Bluetooth Meat Thermometer Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-41429 (CVSS 8.8) — arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontr…
    CVE-2025-68473 (CVSS 0) — ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.1, 5.4.3, 5.3.4, 5.2.…
    CVE-2025-65822 (CVSS 6.8) — The ESP32 system on a chip (SoC) that powers the Meatmeet Pro was found to have JTAG enabled. By leaving JTAG …
    CVE-2025-65829 (CVSS 6.8) — The ESP32 system on a chip (SoC) that powers the Meatmeet basestation device was found to lack Secure Boot. Th…
    CVE-2025-65092 (CVSS 6.9) — ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.1, 5.4.3, and 5.3.4, …
    CVE-2025-27840 (CVSS 6.8) — Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory).…
    CVE-2021-41104 (CVSS 7.5) — ESPHome is a system to control the ESP8266/ESP32. Anyone with web_server enabled and HTTP basic auth configure…
    CVE-2021-28139 (CVSS 8.8) — The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly restrict the Featu…
    CVE-2021-28136 (CVSS 6.5) — The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the recepti…
    CVE-2021-34173 (CVSS 7.5) — An attacker can cause a Denial of Service and kernel panic in v4.2 and earlier versions of Espressif esp32 via…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High