CVE Feed

    Dashboard / CVE / CVE-2025-65827

    CVE-2025-65827

    The mobile application is configured to allow clear text traffic to all domains and communicates with an API server over HTTP. As a result, an adversary located "upstream" can intercept the traffic, inspect its contents, and modify the requests in transit. TThis may result in a total compromise of the user's account if the attacker intercepts a request with active authentication tokens or cracks the MD5 hash sent on login.

    Published:Dec 10, 2025
    Last Modified:Dec 30, 2025
    EPS:Dec 10, 2025
    EPSS Score:0.00024
    CVSS Score:9.1

    Affected Products

    Vendor
    Meatmeet
    Product
    Meatmeet
    Vendor
    Meatmeet
    Product
    Meatmeet Pro

    Exploits

    No exploit reference

    Related CVEs

    CVE-2025-65825 (CVSS 4.6) — The firmware on the basestation of the Meatmeet is not encrypted. An adversary with physical access to the Mea…
    CVE-2025-65828 (CVSS 6.5) — An unauthenticated attacker within proximity of the Meatmeet device can issue several commands over Bluetooth …
    CVE-2025-65826 (CVSS 9.8) — The mobile application was found to contain stored credentials for the network it was developed on. If an atta…
    CVE-2025-65830 (CVSS 9.1) — Due to a lack of certificate validation, all traffic from the mobile application can be intercepted. As a resu…
    CVE-2025-65831 (CVSS 7.5) — The application uses an insecure hashing algorithm (MD5) to hash passwords. If an attacker obtained a copy of …
    CVE-2025-65832 (CVSS 4.6) — The mobile application insecurely handles information stored within memory. By performing a memory dump on the…
    CVE-2025-65820 (CVSS 9.8) — An issue was discovered in Meatmeet Android Mobile Application 1.1.2.0. An exported activity can be spawned wi…
    CVE-2025-65824 (CVSS 8.8) — An unauthenticated attacker within proximity of the Meatmeet device can perform an unauthorized Over The Air (…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High