CVE-2025-65825: The firmware on the basestation of the Meatmeet is not encrypted. An adversary with physical access to the Meatmeet…
CVE-2025-65825 · Severity: medium · CVSS 4.6 · Published 2025-12-10
The firmware on the basestation of the Meatmeet is not encrypted. An adversary with physical access to the Meatmeet device can disassemble the device, connect over UART, and retrieve the firmware dump for analysis. Within the NVS partition they may discover the credentials of the current and previous Wi-Fi networks. This information could be used to gain unauthorized access to the victim's Wi-Fi network.
No. Junglewise Threat Intelligence has no report of CVE-2025-65825 being exploited in the wild.
How severe is CVE-2025-65825?
Medium severity, with a CVSS score of 4.6, published 10 December 2025.
Which products and versions are affected?
Meatmeet Bluetooth Meat Thermometer, Meatmeet Bluetooth Meat Thermometer Firmware, Meatmeet Pro Wifi \. The advisory does not name versions.
Is there a fix for CVE-2025-65825?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
Am I affected by CVE-2025-65825?
Check whether you run Meatmeet Bluetooth Meat Thermometer, Meatmeet Bluetooth Meat Thermometer Firmware or Meatmeet Pro Wifi \. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.