CVE-2025-65821

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-65821
As UART download mode is still enabled on the ESP32 chip on which the firmware runs, an adversary can dump the flash from the device and retrieve sensitive information such as details about the current and previous Wi-Fi network from the NVS partition. Additionally, this allows the adversary to reflash the device with their own firmware which may contain malicious modifications.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://gist.github.com/dead1nfluence/4dffc239b4a460f41a03345fd8e5feb5#file-uart-download-mode-enabled-md Third Party Advisory
https://github.com/dead1nfluence/Meatmeet-Pro-Vulnerabilities/blob/main/Device/UART-Download-Mode-Enabled.md Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:meatmeet:meatmeet_pro_wifi_\&_bluetooth_meat_thermometer_firmware:1.0.34.4:*:*:*:*:*:*:*
cpe:2.3:h:meatmeet:meatmeet_pro_wifi_\&_bluetooth_meat_thermometer:-:*:*:*:*:*:*:*
History

21 Jan 2026, 19:09

Type Values Removed Values Added
CPE cpe:2.3:h:meatmeet:meatmeet_pro_wifi_\&_bluetooth_meat_thermometer:-:*:*:*:*:*:*:*
cpe:2.3:o:meatmeet:meatmeet_pro_wifi_\&_bluetooth_meat_thermometer_firmware:1.0.34.4:*:*:*:*:*:*:*
References () https://gist.github.com/dead1nfluence/4dffc239b4a460f41a03345fd8e5feb5#file-uart-download-mode-enabled-md - () https://gist.github.com/dead1nfluence/4dffc239b4a460f41a03345fd8e5feb5#file-uart-download-mode-enabled-md - Third Party Advisory
References () https://github.com/dead1nfluence/Meatmeet-Pro-Vulnerabilities/blob/main/Device/UART-Download-Mode-Enabled.md - () https://github.com/dead1nfluence/Meatmeet-Pro-Vulnerabilities/blob/main/Device/UART-Download-Mode-Enabled.md - Third Party Advisory
First Time Meatmeet meatmeet Pro Wifi \& Bluetooth Meat Thermometer
Meatmeet meatmeet Pro Wifi \& Bluetooth Meat Thermometer Firmware
Meatmeet

11 Dec 2025, 21:15

Type Values Removed Values Added
CWE CWE-1191
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.5

10 Dec 2025, 21:16

Type Values Removed Values Added
New CVE
Information

Published : 2025-12-10 21:16

Updated : 2026-01-21 19:09

NVD link : CVE-2025-65821

Mitre link : CVE-2025-65821

CVE.ORG link : CVE-2025-65821

JSON object : View

Products Affected

meatmeet

  • meatmeet_pro_wifi_\&_bluetooth_meat_thermometer_firmware
  • meatmeet_pro_wifi_\&_bluetooth_meat_thermometer
CWE
CWE-1191

On-Chip Debug and Test Interface With Improper Access Control