CVE-2025-65825
Medium
Description
The firmware on the basestation of the Meatmeet is not encrypted. An adversary with physical access to the Meatmeet device can disassemble the device, connect over UART, and retrieve the firmware dump for analysis. Within the NVS partition they may discover the credentials of the current and previous Wi-Fi networks. This information could be used to gain unauthorized access to the victim's Wi-Fi network.
SeverityMedium
CVSS4.6
Exploit probability—
ProductMeatmeet Pro Wifi \& Bluetooth Meat Thermometer Firmware
PublishedDec 10, 2025
First seenDec 10, 2025
Weakness typeCWE-311CWE-311
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| meatmeet meatmeet_pro_wifi_\&_bluetooth_meat_thermometer_firmware | 1.0.34.4 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.