meatmeet records
13 published records for vendor meatmeet.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-306 Missing Authentication for Critical Function2
- CWE-1191 On-Chip Debug and Test Interface With Improper Access Control2
- CWE-295 Improper Certificate Validation1
- CWE-311 Missing Encryption of Sensitive Data1
- CWE-312 Cleartext Storage of Sensitive Information1
- CWE-316 Cleartext Storage of Sensitive Information in Memory1
The weakness classes this vendor ships most often: where to look.
CWEAll records
13 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2025-65820No exploit | An issue was discovered in Meatmeet Android Mobile Application 1.1.2.0.meatmeet · meatmeet · CWE-200 | Critical9.8 | — | 0.4% | Dec 10, 2025 |
39Monitor | CVE-2025-65823No exploit | The Meatmeet Pro was found to be shipped with hardcoded Wi-Fi credentials in the firmware, for the test network it was developed on.meatmeet · meatmeet pro wifi & bluetooth meat thermometer firmware · CWE-798 | Critical9.8 | — | 0.4% | Dec 10, 2025 |
39Monitor | CVE-2025-65826No exploit | The mobile application was found to contain stored credentials for the network it was developed on.meatmeet · meatmeet · CWE-312 | Critical9.8 | — | 0.2% | Dec 10, 2025 |
36Monitor | CVE-2025-65830No exploit | Due to a lack of certificate validation, all traffic from the mobile application can be intercepted.meatmeet · meatmeet · CWE-295 | Critical9.1 | — | 0.2% | Dec 10, 2025 |
36Monitor | CVE-2025-65827No exploit | The mobile application is configured to allow clear text traffic to all domains and communicates with an API server over HTTP.meatmeet · meatmeet · CWE-319 | Critical9.1 | — | 0.2% | Dec 10, 2025 |
35Monitor | CVE-2025-65824No exploit | An unauthenticated attacker within proximity of the Meatmeet device can perform an unauthorized Over The Air (OTA) firmware upgrade using Blmeatmeet · meatmeet pro wifi \& bluetooth meat thermometer firmware · CWE-306 | High8.8 | — | 0.5% | Dec 10, 2025 |
30Monitor | CVE-2025-65821No exploit | As UART download mode is still enabled on the ESP32 chip on which the firmware runs, an adversary can dump the flash from the device and retmeatmeet · meatmeet pro wifi \& bluetooth meat thermometer firmware · CWE-1191 | High7.5 | — | 0.3% | Dec 10, 2025 |
30Monitor | CVE-2025-65831No exploit | The application uses an insecure hashing algorithm (MD5) to hash passwords.meatmeet · meatmeet · CWE-327 | High7.5 | — | 0.2% | Dec 10, 2025 |
27Monitor | CVE-2025-65829No exploit | The ESP32 system on a chip (SoC) that powers the Meatmeet basestation device was found to lack Secure Boot.meatmeet · meatmeet pro wifi \& bluetooth meat thermometer firmware · CWE-94 | Medium6.8 | — | 0.3% | Dec 10, 2025 |
27Monitor | CVE-2025-65822No exploit | The ESP32 system on a chip (SoC) that powers the Meatmeet Pro was found to have JTAG enabled.meatmeet · meatmeet pro wifi \& bluetooth meat thermometer firmware · CWE-1191 | Medium6.8 | — | 0.2% | Dec 10, 2025 |
26Monitor | CVE-2025-65828No exploit | An unauthenticated attacker within proximity of the Meatmeet device can issue several commands over Bluetooth Low Energy (BLE) to these devimeatmeet · meatmeet pro wifi \& bluetooth meat thermometer firmware · CWE-306 | Medium6.5 | — | 0.2% | Dec 10, 2025 |
18Monitor | CVE-2025-65832No exploit | The mobile application insecurely handles information stored within memory.meatmeet · meatmeet · CWE-316 | Medium4.6 | — | 0.1% | Dec 10, 2025 |
18Monitor | CVE-2025-65825No exploit | The firmware on the basestation of the Meatmeet is not encrypted.meatmeet · meatmeet pro wifi \& bluetooth meat thermometer firmware · CWE-311 | Medium4.6 | — | 0.1% | Dec 10, 2025 |
- CVE-2025-6582039Monitor
An issue was discovered in Meatmeet Android Mobile Application 1.1.2.0.
CriticalCVSS 9.8No exploitEPSS 0%meatmeet · meatmeetDec 10, 2025
- CVE-2025-6582339Monitor
The Meatmeet Pro was found to be shipped with hardcoded Wi-Fi credentials in the firmware, for the test network it was developed on.
CriticalCVSS 9.8No exploitEPSS 0%meatmeet · meatmeet pro wifi & bluetooth meat thermometer firmwareDec 10, 2025
- CVE-2025-6582639Monitor
The mobile application was found to contain stored credentials for the network it was developed on.
CriticalCVSS 9.8No exploitEPSS 0%meatmeet · meatmeetDec 10, 2025
- CVE-2025-6583036Monitor
Due to a lack of certificate validation, all traffic from the mobile application can be intercepted.
CriticalCVSS 9.1No exploitEPSS 0%meatmeet · meatmeetDec 10, 2025
- CVE-2025-6582736Monitor
The mobile application is configured to allow clear text traffic to all domains and communicates with an API server over HTTP.
CriticalCVSS 9.1No exploitEPSS 0%meatmeet · meatmeetDec 10, 2025
- CVE-2025-6582435Monitor
An unauthenticated attacker within proximity of the Meatmeet device can perform an unauthorized Over The Air (OTA) firmware upgrade using Bl
HighCVSS 8.8No exploitEPSS 0%meatmeet · meatmeet pro wifi \& bluetooth meat thermometer firmwareDec 10, 2025
- CVE-2025-6582130Monitor
As UART download mode is still enabled on the ESP32 chip on which the firmware runs, an adversary can dump the flash from the device and ret
HighCVSS 7.5No exploitEPSS 0%meatmeet · meatmeet pro wifi \& bluetooth meat thermometer firmwareDec 10, 2025
- CVE-2025-6583130Monitor
The application uses an insecure hashing algorithm (MD5) to hash passwords.
HighCVSS 7.5No exploitEPSS 0%meatmeet · meatmeetDec 10, 2025
- CVE-2025-6582927Monitor
The ESP32 system on a chip (SoC) that powers the Meatmeet basestation device was found to lack Secure Boot.
MediumCVSS 6.8No exploitEPSS 0%meatmeet · meatmeet pro wifi \& bluetooth meat thermometer firmwareDec 10, 2025
- CVE-2025-6582227Monitor
The ESP32 system on a chip (SoC) that powers the Meatmeet Pro was found to have JTAG enabled.
MediumCVSS 6.8No exploitEPSS 0%meatmeet · meatmeet pro wifi \& bluetooth meat thermometer firmwareDec 10, 2025
- CVE-2025-6582826Monitor
An unauthenticated attacker within proximity of the Meatmeet device can issue several commands over Bluetooth Low Energy (BLE) to these devi
MediumCVSS 6.5No exploitEPSS 0%meatmeet · meatmeet pro wifi \& bluetooth meat thermometer firmwareDec 10, 2025
- CVE-2025-6583218Monitor
The mobile application insecurely handles information stored within memory.
MediumCVSS 4.6No exploitEPSS 0%meatmeet · meatmeetDec 10, 2025
- CVE-2025-6582518Monitor
The firmware on the basestation of the Meatmeet is not encrypted.
MediumCVSS 4.6No exploitEPSS 0%meatmeet · meatmeet pro wifi \& bluetooth meat thermometer firmwareDec 10, 2025