CVE-2025-65829 Security feature bypass in n/a
Attackers with physical access can flash malicious firmware due to missing Secure Boot, executing arbitrary code on the device.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-65829?
CVE-2025-65829 is a medium-severity vulnerability in n/a, published on 10 Dec 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The ESP32 system on a chip (SoC) that powers the Meatmeet basestation device was found to lack Secure Boot. The Secure Boot feature ensures that only authenticated software can execute on the device. The Secure Boot process forms a chain of trust by verifying all mutable software entities involved in the Application Startup Flow. As a result, an attacker with physical access to the device can flash modified firmware to the device, resulting in the execution of malicious code upon startup.
Weakness: CWE-94
Which versions are affected by CVE-2025-65829?
It affects 1 product.
Products include Meatmeet Meatmeet Pro Wifi \& Bluetooth Meat Thermometer Firmware.
How do I fix CVE-2025-65829?
No fix has been published for CVE-2025-65829 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-65829 being exploited?
There is no known exploitation of CVE-2025-65829 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-x784-g97h-fgqv.