CVE-2025-65829

The ESP32 system on a chip (SoC) that powers the Meatmeet basestation device was found to lack Secure Boot

Medium · published December 10, 2025

CVSS v3.1
6.8
EPSS
0%
Percentile
23.7
In the wild
Unconfirmed
What it is

The ESP32 system on a chip (SoC) that powers the Meatmeet basestation device was found to lack Secure Boot. The Secure Boot feature ensures that only authenticated software can execute on the device. The Secure Boot process forms a chain of trust by verifying all mutable software entities involved in the Application Startup Flow. As a result, an attacker with physical access to the device can flash modified firmware to the device, resulting in the execution of malicious code upon startup.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00320 · 23.7th percentile
Published
2025-12-10T00:00Z
EPSS history
Timeline
  • 10 DEC 00:00Z
    The ESP32 system on a chip (SoC) that powers the Meatmeet basestation device was found to lack Secure Boot
    cvelistv5