CVE Feed

    Dashboard / CVE / CVE-2025-65822

    CVE-2025-65822

    The ESP32 system on a chip (SoC) that powers the Meatmeet Pro was found to have JTAG enabled. By leaving JTAG enabled on an ESP32 in a commercial product an attacker with physical access to the device can connect over this port and reflash the device's firmware with malicious code which will be executed upon running. As a result, the victim will lose access to the functionality of their device and the attack may gain unauthorized access to the victim's Wi-Fi network by re-connecting to the SSID defined in the NVS partition of the device.

    Published:Dec 10, 2025
    Last Modified:Jan 21, 2026
    EPS:Dec 10, 2025
    EPSS Score:0.00031
    CVSS Score:6.8

    Affected Products

    Vendor
    Espressif
    Product
    Esp32
    Vendor
    Meatmeet
    Product
    Meatmeet Pro Wifi \& Bluetooth Meat Thermometer
    Vendor
    Meatmeet
    Product
    Meatmeet Pro Wifi \& Bluetooth Meat Thermometer Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-41429 (CVSS 8.8) — arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontr…
    CVE-2025-68473 (CVSS 0) — ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.1, 5.4.3, 5.3.4, 5.2.…
    CVE-2025-65829 (CVSS 6.8) — The ESP32 system on a chip (SoC) that powers the Meatmeet basestation device was found to lack Secure Boot. Th…
    CVE-2025-65821 (CVSS 7.5) — As UART download mode is still enabled on the ESP32 chip on which the firmware runs, an adversary can dump the…
    CVE-2025-65092 (CVSS 6.9) — ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.1, 5.4.3, and 5.3.4, …
    CVE-2025-27840 (CVSS 6.8) — Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory).…
    CVE-2021-41104 (CVSS 7.5) — ESPHome is a system to control the ESP8266/ESP32. Anyone with web_server enabled and HTTP basic auth configure…
    CVE-2021-28139 (CVSS 8.8) — The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly restrict the Featu…
    CVE-2021-28136 (CVSS 6.5) — The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the recepti…
    CVE-2021-34173 (CVSS 7.5) — An attacker can cause a Denial of Service and kernel panic in v4.2 and earlier versions of Espressif esp32 via…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High