# CVE-2025-65829: The ESP32 system on a chip (SoC) that powers the Meatmeet basestation device was found to lack Secure Boot. The Secure…

Source: https://junglewise.ai/threats/cve-2025-65829-the-esp32-system-on-a-chip-soc-that-powers-the-meatmeet  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-12-10  
License: CC BY 4.0 with a link back

CVE-2025-65829 · Severity: medium · CVSS 6.8 · Published 2025-12-10

The ESP32 system on a chip (SoC) that powers the Meatmeet basestation device was found to lack Secure Boot. The Secure Boot feature ensures that only authenticated software can execute on the device. The Secure Boot process forms a chain of trust by verifying all mutable software entities involved in the Application Startup Flow. As a result, an attacker with physical access to the device can flash modified firmware to the device, resulting in the execution of malicious code upon startup.

Technologies: [Meatmeet Bluetooth Meat Thermometer](https://junglewise.ai/threats/technologies/bluetooth-meat-thermometer), [Meatmeet Bluetooth Meat Thermometer Firmware](https://junglewise.ai/threats/technologies/bluetooth-meat-thermometer-firmware), [Meatmeet Pro Wifi \](https://junglewise.ai/threats/technologies/meatmeet-pro-wifi). Vendors: [Meatmeet](https://junglewise.ai/threats/vendors/meatmeet).

## Quick answers

**Is CVE-2025-65829 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-65829 being exploited in the wild.

**How severe is CVE-2025-65829?** Medium severity, with a CVSS score of 6.8, published 10 December 2025.

**Which products and versions are affected?** Meatmeet Bluetooth Meat Thermometer, Meatmeet Bluetooth Meat Thermometer Firmware, Meatmeet Pro Wifi \. The advisory does not name versions.

**Is there a fix for CVE-2025-65829?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-65829?** Check whether you run Meatmeet Bluetooth Meat Thermometer, Meatmeet Bluetooth Meat Thermometer Firmware or Meatmeet Pro Wifi \. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Meatmeet Bluetooth Meat Thermometer
- Meatmeet Bluetooth Meat Thermometer Firmware
- Meatmeet Pro Wifi \

## Related threats

- [The firmware on the basestation of the Meatmeet is not encrypted. An adversary with physical access to the Meatmeet…](https://junglewise.ai/threats/cve-2025-65825-the-firmware-on-the-basestation-of-the-meatmeet-is-not-encrypted)
- [The ESP32 system on a chip (SoC) that powers the Meatmeet Pro was found to have JTAG enabled. By leaving JTAG enabled…](https://junglewise.ai/threats/cve-2025-65822-the-esp32-system-on-a-chip-soc-that-powers-the-meatmeet-pro-was)
- [As UART download mode is still enabled on the ESP32 chip on which the firmware runs, an adversary can dump the flash…](https://junglewise.ai/threats/cve-2025-65821-as-uart-download-mode-is-still-enabled-on-the-esp32-chip-on-which)