CVE-2025-65829
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
The ESP32 SoC in the Meatmeet basestation lacks Secure Boot, which ensures only authenticated software can execute. Without a chain of trust during startup, an attacker with physical access can flash modified firmware and execute malicious code.
Risk Assessment
An attacker with physical access to the device can install malicious firmware, taking control of the basestation and potentially the environment it serves.
Recommendation
Enable Secure Boot on the ESP32 devices in the Meatmeet basestation and deploy signed firmware to prevent execution of unauthorized code.
Other vulnerabilities in ESP32
See all- CVE-2025-65822Medium
The ESP32 system on a chip (SoC) that powers the Meatmeet Pro was found to have JTAG enabled. By leaving JTAG enabled on an ESP32 in a commercial product an attacker with physical access to the device can connect over this port and reflash the device's firmware with malicious code which will be executed upon running. As a result, the victim will lose access to the functionality of their device and the attack may gain unauthorized access to the victim's Wi-Fi network by re-connecting to the SSID defined in the NVS partition of the device.
- CVE-2025-65821High
UART download mode remains enabled on the ESP32 chip running the firmware. An adversary can dump the device flash and retrieve sensitive information such as current and previous Wi-Fi network details from the NVS partition, and can also reflash the device with their own firmware containing malicious modifications.
Original NVD description (English source)
The ESP32 system on a chip (SoC) that powers the Meatmeet basestation device was found to lack Secure Boot. The Secure Boot feature ensures that only authenticated software can execute on the device. The Secure Boot process forms a chain of trust by verifying all mutable software entities involved in the Application Startup Flow. As a result, an attacker with physical access to the device can flash modified firmware to the device, resulting in the execution of malicious code upon startup.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS