THREATIST.IORead the docs 7 records
The ESP32 system on a chip (SoC) that powers the Meatmeet basestation device was found to lack Secure Boot.
An unauthenticated attacker within proximity of the Meatmeet device can issue several commands over Bluetooth Low Energy (BLE) to these devices which would result in a Denial of Service.
The firmware on the basestation of the Meatmeet is not encrypted.
An unauthenticated attacker within proximity of the Meatmeet device can perform an unauthorized Over The Air (OTA) firmware upgrade using Bluetooth Low Energy (BLE), resulting in the firmware on the device being overwrit…
The Meatmeet Pro was found to be shipped with hardcoded Wi-Fi credentials in the firmware, for the test network it was developed on.
The ESP32 system on a chip (SoC) that powers the Meatmeet Pro was found to have JTAG enabled.
As UART download mode is still enabled on the ESP32 chip on which the firmware runs, an adversary can dump the flash from the device and retrieve sensitive information such as details about the current and previous Wi-Fi…