Vendors / Meatmeet Records 13 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 5
CVSS high 3
Exploited now Meatmeet records in CISA KEV No Meatmeet vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 62
An unauthenticated attacker within proximity of the Meatmeet device can issue several commands over Bluetooth Low Energy (BLE) to these devices which would result in a Denial of Service.
CVSS 3.1 MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00281 · Published 2025-12-10 · No fix listed CWE-306
Priority MEDIUM 49
The mobile application was found to contain stored credentials for the network it was developed on.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00295 · Published 2025-12-10 · No fix listed CWE-312
Priority MEDIUM 49
The Meatmeet Pro was found to be shipped with hardcoded Wi-Fi credentials in the firmware, for the test network it was developed on.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00433 · Published 2025-12-10 · No fix listed CWE-798
Priority MEDIUM 49
An issue was discovered in Meatmeet Android Mobile Application 1.1.2.0.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00468 · Published 2025-12-10 · No fix listed CWE-200
Priority MEDIUM 47
Due to a lack of certificate validation, all traffic from the mobile application can be intercepted.
CVSS 3.1 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00268 · Published 2025-12-10 · No fix listed CWE-295
Priority MEDIUM 41
The mobile application is configured to allow clear text traffic to all domains and communicates with an API server over HTTP.
CVSS 3.1 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.0026 · Published 2025-12-10 · No fix listed CWE-319
Priority MEDIUM 41
An unauthenticated attacker within proximity of the Meatmeet device can perform an unauthorized Over The Air (OTA) firmware upgrade using Bluetooth Low Energy (BLE), resulting in the firmware on the device being overwrit…
CVSS 3.1 HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.0056 · Published 2025-12-10 · No fix listed CWE-306
Priority LOW 39
As UART download mode is still enabled on the ESP32 chip on which the firmware runs, an adversary can dump the flash from the device and retrieve sensitive information such as details about the current and previous Wi-Fi…
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00368 · Published 2025-12-10 · No fix listed CWE-1191
Priority LOW 38
The application uses an insecure hashing algorithm (MD5) to hash passwords.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00212 · Published 2025-12-10 · No fix listed CWE-327
Priority LOW 32
The ESP32 system on a chip (SoC) that powers the Meatmeet basestation device was found to lack Secure Boot.
CVSS 3.1 MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.0032 · Published 2025-12-10 · No fix listed CWE-94
Priority LOW 31
The ESP32 system on a chip (SoC) that powers the Meatmeet Pro was found to have JTAG enabled.
CVSS 3.1 MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00208 · Published 2025-12-10 · No fix listed CWE-1191
Priority LOW 20
The mobile application insecurely handles information stored within memory.
CVSS 3.1 MEDIUM 4.6· Physical · No auth · No interaction · EPSS 0.0014 · Published 2025-12-10 · No fix listed CWE-316
Priority LOW 20
The firmware on the basestation of the Meatmeet is not encrypted.
CVSS 3.1 MEDIUM 4.6· Physical · No auth · No interaction · EPSS 0.00132 · Published 2025-12-10 · No fix listed CWE-311
Open these records in search → All records by CVSS severity
5 3 5 0 0
THREATIST.IORead the docs