Записи meatmeet
13 опубликованных записей вендора meatmeet.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 1
- С записью об исправлении
- 0 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Повторяющиеся классы
- CWE-306 Missing Authentication for Critical Function2
- CWE-1191 On-Chip Debug and Test Interface With Improper Access Control2
- CWE-295 Improper Certificate Validation1
- CWE-311 Missing Encryption of Sensitive Data1
- CWE-312 Cleartext Storage of Sensitive Information1
- CWE-316 Cleartext Storage of Sensitive Information in Memory1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
13 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
39Наблюдать | CVE-2025-65820Эксплойта нет | An issue was discovered in Meatmeet Android Mobile Application 1.1.2.0.meatmeet · meatmeet · CWE-200 | Критическая9,8 | — | 0,4 % | 10 дек. 2025 г. |
39Наблюдать | CVE-2025-65823Эксплойта нет | The Meatmeet Pro was found to be shipped with hardcoded Wi-Fi credentials in the firmware, for the test network it was developed on.meatmeet · meatmeet pro wifi & bluetooth meat thermometer firmware · CWE-798 | Критическая9,8 | — | 0,4 % | 10 дек. 2025 г. |
39Наблюдать | CVE-2025-65826Эксплойта нет | The mobile application was found to contain stored credentials for the network it was developed on.meatmeet · meatmeet · CWE-312 | Критическая9,8 | — | 0,2 % | 10 дек. 2025 г. |
36Наблюдать | CVE-2025-65830Эксплойта нет | Due to a lack of certificate validation, all traffic from the mobile application can be intercepted.meatmeet · meatmeet · CWE-295 | Критическая9,1 | — | 0,2 % | 10 дек. 2025 г. |
36Наблюдать | CVE-2025-65827Эксплойта нет | The mobile application is configured to allow clear text traffic to all domains and communicates with an API server over HTTP.meatmeet · meatmeet · CWE-319 | Критическая9,1 | — | 0,2 % | 10 дек. 2025 г. |
35Наблюдать | CVE-2025-65824Эксплойта нет | An unauthenticated attacker within proximity of the Meatmeet device can perform an unauthorized Over The Air (OTA) firmware upgrade using Blmeatmeet · meatmeet pro wifi \& bluetooth meat thermometer firmware · CWE-306 | Высокая8,8 | — | 0,5 % | 10 дек. 2025 г. |
30Наблюдать | CVE-2025-65821Эксплойта нет | As UART download mode is still enabled on the ESP32 chip on which the firmware runs, an adversary can dump the flash from the device and retmeatmeet · meatmeet pro wifi \& bluetooth meat thermometer firmware · CWE-1191 | Высокая7,5 | — | 0,3 % | 10 дек. 2025 г. |
30Наблюдать | CVE-2025-65831Эксплойта нет | The application uses an insecure hashing algorithm (MD5) to hash passwords.meatmeet · meatmeet · CWE-327 | Высокая7,5 | — | 0,2 % | 10 дек. 2025 г. |
27Наблюдать | CVE-2025-65829Эксплойта нет | The ESP32 system on a chip (SoC) that powers the Meatmeet basestation device was found to lack Secure Boot.meatmeet · meatmeet pro wifi \& bluetooth meat thermometer firmware · CWE-94 | Средняя6,8 | — | 0,3 % | 10 дек. 2025 г. |
27Наблюдать | CVE-2025-65822Эксплойта нет | The ESP32 system on a chip (SoC) that powers the Meatmeet Pro was found to have JTAG enabled.meatmeet · meatmeet pro wifi \& bluetooth meat thermometer firmware · CWE-1191 | Средняя6,8 | — | 0,2 % | 10 дек. 2025 г. |
26Наблюдать | CVE-2025-65828Эксплойта нет | An unauthenticated attacker within proximity of the Meatmeet device can issue several commands over Bluetooth Low Energy (BLE) to these devimeatmeet · meatmeet pro wifi \& bluetooth meat thermometer firmware · CWE-306 | Средняя6,5 | — | 0,2 % | 10 дек. 2025 г. |
18Наблюдать | CVE-2025-65832Эксплойта нет | The mobile application insecurely handles information stored within memory.meatmeet · meatmeet · CWE-316 | Средняя4,6 | — | 0,1 % | 10 дек. 2025 г. |
18Наблюдать | CVE-2025-65825Эксплойта нет | The firmware on the basestation of the Meatmeet is not encrypted.meatmeet · meatmeet pro wifi \& bluetooth meat thermometer firmware · CWE-311 | Средняя4,6 | — | 0,1 % | 10 дек. 2025 г. |
- CVE-2025-6582039Наблюдать
An issue was discovered in Meatmeet Android Mobile Application 1.1.2.0.
КритическаяCVSS 9,8Эксплойта нетEPSS 0 %meatmeet · meatmeet10 дек. 2025 г.
- CVE-2025-6582339Наблюдать
The Meatmeet Pro was found to be shipped with hardcoded Wi-Fi credentials in the firmware, for the test network it was developed on.
КритическаяCVSS 9,8Эксплойта нетEPSS 0 %meatmeet · meatmeet pro wifi & bluetooth meat thermometer firmware10 дек. 2025 г.
- CVE-2025-6582639Наблюдать
The mobile application was found to contain stored credentials for the network it was developed on.
КритическаяCVSS 9,8Эксплойта нетEPSS 0 %meatmeet · meatmeet10 дек. 2025 г.
- CVE-2025-6583036Наблюдать
Due to a lack of certificate validation, all traffic from the mobile application can be intercepted.
КритическаяCVSS 9,1Эксплойта нетEPSS 0 %meatmeet · meatmeet10 дек. 2025 г.
- CVE-2025-6582736Наблюдать
The mobile application is configured to allow clear text traffic to all domains and communicates with an API server over HTTP.
КритическаяCVSS 9,1Эксплойта нетEPSS 0 %meatmeet · meatmeet10 дек. 2025 г.
- CVE-2025-6582435Наблюдать
An unauthenticated attacker within proximity of the Meatmeet device can perform an unauthorized Over The Air (OTA) firmware upgrade using Bl
ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %meatmeet · meatmeet pro wifi \& bluetooth meat thermometer firmware10 дек. 2025 г.
- CVE-2025-6582130Наблюдать
As UART download mode is still enabled on the ESP32 chip on which the firmware runs, an adversary can dump the flash from the device and ret
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %meatmeet · meatmeet pro wifi \& bluetooth meat thermometer firmware10 дек. 2025 г.
- CVE-2025-6583130Наблюдать
The application uses an insecure hashing algorithm (MD5) to hash passwords.
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %meatmeet · meatmeet10 дек. 2025 г.
- CVE-2025-6582927Наблюдать
The ESP32 system on a chip (SoC) that powers the Meatmeet basestation device was found to lack Secure Boot.
СредняяCVSS 6,8Эксплойта нетEPSS 0 %meatmeet · meatmeet pro wifi \& bluetooth meat thermometer firmware10 дек. 2025 г.
- CVE-2025-6582227Наблюдать
The ESP32 system on a chip (SoC) that powers the Meatmeet Pro was found to have JTAG enabled.
СредняяCVSS 6,8Эксплойта нетEPSS 0 %meatmeet · meatmeet pro wifi \& bluetooth meat thermometer firmware10 дек. 2025 г.
- CVE-2025-6582826Наблюдать
An unauthenticated attacker within proximity of the Meatmeet device can issue several commands over Bluetooth Low Energy (BLE) to these devi
СредняяCVSS 6,5Эксплойта нетEPSS 0 %meatmeet · meatmeet pro wifi \& bluetooth meat thermometer firmware10 дек. 2025 г.
- CVE-2025-6583218Наблюдать
The mobile application insecurely handles information stored within memory.
СредняяCVSS 4,6Эксплойта нетEPSS 0 %meatmeet · meatmeet10 дек. 2025 г.
- CVE-2025-6582518Наблюдать
The firmware on the basestation of the Meatmeet is not encrypted.
СредняяCVSS 4,6Эксплойта нетEPSS 0 %meatmeet · meatmeet pro wifi \& bluetooth meat thermometer firmware10 дек. 2025 г.