CVE-2025-65825
MediumCVSS 4.6Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
The firmware on the Meatmeet basestation is not encrypted. An adversary with physical access can disassemble the device, connect over UART, and retrieve a firmware dump for analysis, potentially discovering credentials of current and previous Wi-Fi networks in the NVS partition.
Risk Assessment
An attacker with physical access can obtain the victim's Wi-Fi credentials and gain unauthorized access to their network.
Recommendation
Update Meatmeet firmware to a version that encrypts data in the NVS partition and restrict physical access to the device.
Other vulnerabilities in Meatmeet
See all- CVE-2025-65832Medium
The Meatmeet mobile application insecurely handles information stored in memory. After a user logs out and terminates the app, a memory dump can reveal Wi-Fi credentials sent during pairing, JWTs used for authentication, and other sensitive details.
- CVE-2025-65828Medium
An unauthenticated attacker within BLE range can send shutdown, restart, or clear config commands to Meatmeet devices, causing denial of service. The device loses cloud connectivity until manually reconfigured or restarted.
- CVE-2025-65824High
An unauthenticated attacker within proximity of the Meatmeet device can perform an unauthorized Over The Air (OTA) firmware upgrade using Bluetooth Low Energy (BLE), overwriting the device firmware with the attacker's code. Since the device does not check upgrades, this results in Remote Code Execution (RCE) and the victim losing complete access to the Meatmeet.
Original NVD description (English source)
The firmware on the basestation of the Meatmeet is not encrypted. An adversary with physical access to the Meatmeet device can disassemble the device, connect over UART, and retrieve the firmware dump for analysis. Within the NVS partition they may discover the credentials of the current and previous Wi-Fi networks. This information could be used to gain unauthorized access to the victim's Wi-Fi network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS