CVE-2025-65825

Published: Dec 10, 2025Modified: Jun 17, 2026

4.6

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 0.9 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

The firmware on the basestation of the Meatmeet is not encrypted. An adversary with physical access to the Meatmeet device can disassemble the device, connect over UART, and retrieve the firmware dump for analysis. Within the NVS partition they may discover the credentials of the current and previous Wi-Fi networks. This information could be used to gain unauthorized access to the victim's Wi-Fi network.

Affected (1)

Products: Meatmeet: Meatmeet Pro Wifi & Bluetooth Meat Thermometer Firmware

1 product

Meatmeet Pro Wifi & Bluetooth Meat Thermometer Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Meatmeet Meatmeet Pro Wifi & Bluetooth Meat Thermometer Firmware	Version 1.0.34.4

Running on/with	Platform Versions
Meatmeet Meatmeet Pro Wifi & Bluetooth Meat Thermometer	All versions

Related CWEs

Missing Encryption of Sensitive Data

The product does not encrypt sensitive or critical information before storage or transmission.

References (2)

https://gist.github.com/dead1nfluence/4dffc239b4a460f41a03345fd8e5feb5#file-flash-encryption-disabled-md

Source: cve@mitre.org

Third Party Advisory

https://github.com/dead1nfluence/Meatmeet-Pro-Vulnerabilities/blob/main/Device/Flash-Encryption-Disabled.md

Source: cve@mitre.org

Third Party Advisory

Timeline

No history available yet.