Auth bypass in Meatmeet Pro Wifi \& Bluetooth Meat Thermometer
CVE-2025-65828
An unauthenticated attacker within proximity of the Meatmeet device can issue several commands over Bluetooth Low Energy (BLE) to these devices which would result in a Denial of Service. These commands include: shutdown, restart, clear config. Clear config would disassociate the current device from its user and would require re-configuration to re-enable the device. As a result, the end user would be unable to receive updates from the Meatmeet base station which communicates with the cloud services until the device had been fixed or turned back on.
Vulnerability class: Broken Authentication
EPSS: 0.003 (17.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Meatmeet Meatmeet_pro_wifi_\&_bluetooth_meat_thermometer
- Meatmeet Meatmeet_pro_wifi_\&_bluetooth_meat_thermometer_firmware — versions 1.0.34.4
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Product)
- cve@mitre.org (Exploit, Third Party Advisory)
Frequently asked questions
- What is CVE-2025-65828?
- CVE-2025-65828 is a medium-severity vulnerability in Meatmeet Pro Wifi \& Bluetooth Meat Thermometer, classified under Missing Authentication for Critical Function. CVSS score: 6.5/10. Published 2025-12-10.
- How severe is CVE-2025-65828?
- Medium severity. CVSS v3 base score is 6.5 out of 10.