Meatmeet

An unauthenticated attacker within proximity of the Meatmeet device can issue several commands over Bluetooth Low Energy (BLE) to these devices which would result in a Denial of Service.

The Meatmeet Pro was found to be shipped with hardcoded Wi-Fi credentials in the firmware, for the test network it was developed on.

An unauthenticated attacker within proximity of the Meatmeet device can perform an unauthorized Over The Air (OTA) firmware upgrade using Bluetooth Low Energy (BLE), resulting in the firmware on the device being overwrit…

As UART download mode is still enabled on the ESP32 chip on which the firmware runs, an adversary can dump the flash from the device and retrieve sensitive information such as details about the current and previous Wi-Fi…

The ESP32 system on a chip (SoC) that powers the Meatmeet basestation device was found to lack Secure Boot.

The ESP32 system on a chip (SoC) that powers the Meatmeet Pro was found to have JTAG enabled.

The firmware on the basestation of the Meatmeet is not encrypted.