CVE Feed

    Dashboard / CVE / CVE-2025-65825

    CVE-2025-65825

    The firmware on the basestation of the Meatmeet is not encrypted. An adversary with physical access to the Meatmeet device can disassemble the device, connect over UART, and retrieve the firmware dump for analysis. Within the NVS partition they may discover the credentials of the current and previous Wi-Fi networks. This information could be used to gain unauthorized access to the victim's Wi-Fi network.

    Published:Dec 10, 2025
    Last Modified:Dec 30, 2025
    EPS:Dec 10, 2025
    EPSS Score:0.0001
    CVSS Score:4.6

    Affected Products

    Vendor
    Meatmeet
    Product
    Meatmeet
    Vendor
    Meatmeet
    Product
    Meatmeet Pro Wifi \& Bluetooth Meat Thermometer
    Vendor
    Meatmeet
    Product
    Meatmeet Pro Wifi \& Bluetooth Meat Thermometer Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2025-65828 (CVSS 6.5) — An unauthenticated attacker within proximity of the Meatmeet device can issue several commands over Bluetooth …
    CVE-2025-65826 (CVSS 9.8) — The mobile application was found to contain stored credentials for the network it was developed on. If an atta…
    CVE-2025-65830 (CVSS 9.1) — Due to a lack of certificate validation, all traffic from the mobile application can be intercepted. As a resu…
    CVE-2025-65831 (CVSS 7.5) — The application uses an insecure hashing algorithm (MD5) to hash passwords. If an attacker obtained a copy of …
    CVE-2025-65832 (CVSS 4.6) — The mobile application insecurely handles information stored within memory. By performing a memory dump on the…
    CVE-2025-65827 (CVSS 9.1) — The mobile application is configured to allow clear text traffic to all domains and communicates with an API s…
    CVE-2025-65820 (CVSS 9.8) — An issue was discovered in Meatmeet Android Mobile Application 1.1.2.0. An exported activity can be spawned wi…
    CVE-2025-65824 (CVSS 8.8) — An unauthenticated attacker within proximity of the Meatmeet device can perform an unauthorized Over The Air (…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High