CVE-2025-65824
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk44th percentile - higher than 44% of all known CVEs
Summary
An unauthenticated attacker within proximity of the Meatmeet device can perform an unauthorized Over The Air (OTA) firmware upgrade using Bluetooth Low Energy (BLE), overwriting the device firmware with the attacker's code. Since the device does not check upgrades, this results in Remote Code Execution (RCE) and the victim losing complete access to the Meatmeet.
Risk Assessment
The victim loses complete control of the Meatmeet device, and the attacker can execute arbitrary code. The risk includes device takeover and loss of access.
Recommendation
Restrict BLE access to the device and monitor for unauthorized upgrades. Contact the vendor for a firmware fix.
Other vulnerabilities in Meatmeet
See all- CVE-2025-65832Medium
The Meatmeet mobile application insecurely handles information stored in memory. After a user logs out and terminates the app, a memory dump can reveal Wi-Fi credentials sent during pairing, JWTs used for authentication, and other sensitive details.
- CVE-2025-65828Medium
An unauthenticated attacker within BLE range can send shutdown, restart, or clear config commands to Meatmeet devices, causing denial of service. The device loses cloud connectivity until manually reconfigured or restarted.
- CVE-2025-65825Medium
The firmware on the Meatmeet basestation is not encrypted. An adversary with physical access can disassemble the device, connect over UART, and retrieve a firmware dump for analysis, potentially discovering credentials of current and previous Wi-Fi networks in the NVS partition.
Original NVD description (English source)
An unauthenticated attacker within proximity of the Meatmeet device can perform an unauthorized Over The Air (OTA) firmware upgrade using Bluetooth Low Energy (BLE), resulting in the firmware on the device being overwritten with the attacker's code. As the device does not perform checks on upgrades, this results in Remote Code Execution (RCE) and the victim losing complete access to the Meatmeet.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS