CVE-2025-65823 Hardcoded credentials in n/a
Hardcoded Wi-Fi credentials in Meatmeet Pro firmware allow attackers to access the vendor's network or force device connections to malicious access points.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-65823?
CVE-2025-65823 is a critical vulnerability in n/a, published on 10 Dec 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Meatmeet Pro was found to be shipped with hardcoded Wi-Fi credentials in the firmware, for the test network it was developed on. If an attacker retrieved this, and found the physical location of the Wi-Fi network, they could gain unauthorized access to the Wi-Fi network of the vendor. Additionally, if an attacker were located in close physical proximity to the device when it was first set up, they may be able to force the device to auto-connect to an attacker-controlled access point by setting the SSID and password to the same as which was found in the firmware file.
Weakness: CWE-798
Which versions are affected by CVE-2025-65823?
It affects 1 product.
Products include Meatmeet Meatmeet Pro Wifi \& Bluetooth Meat Thermometer Firmware.
How do I fix CVE-2025-65823?
No fix has been published for CVE-2025-65823 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-65823 being exploited?
There is no known exploitation of CVE-2025-65823 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-27q6-m98q-fwm4.