CVE-2025-65823CWE-798hardcoded-credentials

CVE-2025-65823

Critical · published December 11, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
36.6
In the wild
Unconfirmed
What it is

🔥 Hardcoded Wi-Fi credentials in the Meatmeet Pro firmware could hand your network over to attackers on a silver platter! Think of it like leaving your front door unlocked with a sign saying 'free Wi-Fi inside'—anyone nearby can just walk right in and take over! If an attacker gets hold of these credentials and knows where your network is, they could waltz right into your Wi-Fi, potentially snooping on sensitive data or launching further attacks. If they’re close enough when the device is set up, they might even trick it into connecting to their own rogue access point—absolutely devastating!

Put simply

Think of it like leaving your front door unlocked with a sign saying 'free Wi-Fi inside'—anyone nearby can just walk right in and take over! This vulnerability stems from hardcoded Wi-Fi credentials in the Meatmeet Pro firmware, allowing unauthorized access if an attacker retrieves this sensitive information. They can exploit it by mimicking the legitimate network and forcing the device to connect.

What to do

If an attacker gets hold of these credentials and knows where your network is, they could waltz right into your Wi-Fi, potentially snooping on sensitive data or launching further attacks. If they’re close enough when the device is set up, they might even trick it into connecting to their own rogue access point—absolutely devastating! Immediately update the firmware to the latest version provided by the vendor to eliminate hardcoded credentials. Additionally, consider changing your Wi-Fi network settings and implementing stronger security measures to protect your network. Regularly monitor for unauthorized devices connected to your network. You've got this! Follow these steps and you’ll keep your network safe and sound! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00433 · 36.6th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2025-12-11T02:16Z
Affected products (1)
ProductVersionsFixed in
meatmeet/meatmeet_pro_wifi_\&_bluetooth_meat_thermometer_firmwareall versions—
References (2)
EPSS history
Timeline
  • 10 DEC 00:00Z
    The Meatmeet Pro was found to be shipped with hardcoded Wi-Fi credentials in the firmware, for the test network it was developed on
    cvelistv5