PatchTheCVEmeatmeet vulnerabilities
Recent CVEs affecting meatmeet products. 13 tracked.
meatmeet has 13 tracked vulnerabilities, 5 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-12-10. Highest priority: CVE-2025-65823 (score 49/100).
- CVE-2025-65823 CRITICAL 9.8 MITIGATE The Meatmeet Pro was found to be shipped with hardcoded Wi-Fi credentials in the firmware, for the test networ
- CVE-2025-65824 HIGH 8.8 MITIGATE An unauthenticated attacker within proximity of the Meatmeet device can perform an unauthorized Over The Air (
- CVE-2025-65828 MEDIUM 6.5 MITIGATE An unauthenticated attacker within proximity of the Meatmeet device can issue several commands over Bluetooth
- CVE-2025-65832 MEDIUM 4.6 DOWNGRADE The mobile application insecurely handles information stored within memory
- CVE-2025-65831 HIGH 7.5 DOWNGRADE The application uses an insecure hashing algorithm (MD5) to hash passwords
- CVE-2025-65830 CRITICAL 9.1 DOWNGRADE Due to a lack of certificate validation, all traffic from the mobile application can be intercepted
- CVE-2025-65829 MEDIUM 6.8 MITIGATE The ESP32 system on a chip (SoC) that powers the Meatmeet basestation device was found to lack Secure Boot
- CVE-2025-65827 CRITICAL 9.1 DOWNGRADE The mobile application is configured to allow clear text traffic to all domains and communicates with an API s
- CVE-2025-65826 CRITICAL 9.8 DOWNGRADE The mobile application was found to contain stored credentials for the network it was developed on
- CVE-2025-65825 MEDIUM 4.6 MITIGATE The firmware on the basestation of the Meatmeet is not encrypted
- CVE-2025-65822 MEDIUM 6.8 MITIGATE The ESP32 system on a chip (SoC) that powers the Meatmeet Pro was found to have JTAG enabled
- CVE-2025-65821 HIGH 7.5 MITIGATE As UART download mode is still enabled on the ESP32 chip on which the firmware runs, an adversary can dump the
- CVE-2025-65820 CRITICAL 9.8 DOWNGRADE An issue was discovered in Meatmeet Android Mobile Application 1.1.2.0
FAQ
How do I fix meatmeet vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is meatmeet being exploited right now?
None of the tracked meatmeet CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which meatmeet CVE should I patch first?
CVE-2025-65823 currently ranks highest (49/100): The Meatmeet Pro was found to be shipped with hardcoded Wi-Fi credentials in the firmware, for the test networ.