# CVE-2025-65822: The ESP32 system on a chip (SoC) that powers the Meatmeet Pro was found to have JTAG enabled. By leaving JTAG enabled…

Source: https://junglewise.ai/threats/cve-2025-65822-the-esp32-system-on-a-chip-soc-that-powers-the-meatmeet-pro-was  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-12-10  
License: CC BY 4.0 with a link back

CVE-2025-65822 · Severity: medium · CVSS 6.8 · Published 2025-12-10

The ESP32 system on a chip (SoC) that powers the Meatmeet Pro was found to have JTAG enabled. By leaving JTAG enabled on an ESP32 in a commercial product an attacker with physical access to the device can connect over this port and reflash the device's firmware with malicious code which will be executed upon running. As a result, the victim will lose access to the functionality of their device and the attack may gain unauthorized access to the victim's Wi-Fi network by re-connecting to the SSID defined in the NVS partition of the device.

Technologies: [Meatmeet Bluetooth Meat Thermometer](https://junglewise.ai/threats/technologies/bluetooth-meat-thermometer), [Meatmeet Bluetooth Meat Thermometer Firmware](https://junglewise.ai/threats/technologies/bluetooth-meat-thermometer-firmware), [Meatmeet Pro Wifi \](https://junglewise.ai/threats/technologies/meatmeet-pro-wifi). Vendors: [Meatmeet](https://junglewise.ai/threats/vendors/meatmeet).

## Quick answers

**Is CVE-2025-65822 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-65822 being exploited in the wild.

**How severe is CVE-2025-65822?** Medium severity, with a CVSS score of 6.8, published 10 December 2025.

**Which products and versions are affected?** Meatmeet Bluetooth Meat Thermometer, Meatmeet Bluetooth Meat Thermometer Firmware, Meatmeet Pro Wifi \. The advisory does not name versions.

**Is there a fix for CVE-2025-65822?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-65822?** Check whether you run Meatmeet Bluetooth Meat Thermometer, Meatmeet Bluetooth Meat Thermometer Firmware or Meatmeet Pro Wifi \. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Meatmeet Bluetooth Meat Thermometer
- Meatmeet Bluetooth Meat Thermometer Firmware
- Meatmeet Pro Wifi \

## Related threats

- [The ESP32 system on a chip (SoC) that powers the Meatmeet basestation device was found to lack Secure Boot. The Secure…](https://junglewise.ai/threats/cve-2025-65829-the-esp32-system-on-a-chip-soc-that-powers-the-meatmeet)
- [The firmware on the basestation of the Meatmeet is not encrypted. An adversary with physical access to the Meatmeet…](https://junglewise.ai/threats/cve-2025-65825-the-firmware-on-the-basestation-of-the-meatmeet-is-not-encrypted)
- [As UART download mode is still enabled on the ESP32 chip on which the firmware runs, an adversary can dump the flash…](https://junglewise.ai/threats/cve-2025-65821-as-uart-download-mode-is-still-enabled-on-the-esp32-chip-on-which)