CVE-2025-65828CWE-306

CVE-2025-65828

Medium · published December 11, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
19.5
In the wild
Unconfirmed
What it is

An unauthenticated attacker within proximity of the Meatmeet device can issue several commands over Bluetooth Low Energy (BLE) to these devices which would result in a Denial of Service. These commands include: shutdown, restart, clear config. Clear config would disassociate the current device from its user and would require re-configuration to re-enable the device. As a result, the end user would be unable to receive updates from the Meatmeet base station which communicates with the cloud services until the device had been fixed or turned back on.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00281 · 19.5th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2025-12-11T02:16Z
Affected products (1)
ProductVersionsFixed in
meatmeet/meatmeet_pro_wifi_\&_bluetooth_meat_thermometer_firmwareall versions—
References (1)
EPSS history
Timeline
  • 10 DEC 00:00Z
    An unauthenticated attacker within proximity of the Meatmeet device can issue several commands over Bluetooth Low Energy (BLE) to these devices which would…
    cvelistv5