Medium severity6.8NVD Advisory· Published Dec 10, 2025· Updated Jun 17, 2026
CVE-2025-65829
CVE-2025-65829
Description
The ESP32 system on a chip (SoC) that powers the Meatmeet basestation device was found to lack Secure Boot. The Secure Boot feature ensures that only authenticated software can execute on the device. The Secure Boot process forms a chain of trust by verifying all mutable software entities involved in the Application Startup Flow. As a result, an attacker with physical access to the device can flash modified firmware to the device, resulting in the execution of malicious code upon startup.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- Meatmeet/ESP32 basestation devicedescription
- cpe:2.3:o:meatmeet:meatmeet_pro_wifi_\&_bluetooth_meat_thermometer_firmware:1.0.34.4:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- gist.github.com/dead1nfluence/4dffc239b4a460f41a03345fd8e5feb5nvdThird Party Advisory
- github.com/dead1nfluence/Meatmeet-Pro-Vulnerabilities/blob/main/Device/Secure-Boot-Disabled.mdnvdThird Party Advisory
News mentions
0No linked articles in our index yet.