CVE-2025-65828

CVE-2025-65828 is a medium-severity vulnerability in Meatmeet Meatmeet Pro Wifi & Bluetooth Meat Thermometer Firmware with a CVSS 3.x base score of 6.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-306.

Key facts

Description

An unauthenticated attacker within proximity of the Meatmeet device can issue several commands over Bluetooth Low Energy (BLE) to these devices which would result in a Denial of Service. These commands include: shutdown, restart, clear config. Clear config would disassociate the current device from its user and would require re-configuration to re-enable the device. As a result, the end user would be unable to receive updates from the Meatmeet base station which communicates with the cloud services until the device had been fixed or turned back on.

Frequently asked questions

What is CVE-2025-65828?
An unauthenticated attacker within proximity of the Meatmeet device can issue several commands over Bluetooth Low Energy (BLE) to these devices which would result in a Denial of Service. These commands include: shutdown, restart, clear config. Clear config would disassociate the current device from its user and would require re-configuration to re-enable the device. As a result, the end user would be unable to receive updates from the Meatmeet base station which communicates with the cloud services until the device had been fixed or turned back on.
How severe is CVE-2025-65828?
CVE-2025-65828 has a CVSS 3.x base score of 6.5, rated medium severity. It is exploitable over an adjacent network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability high.
Is CVE-2025-65828 being actively exploited?
It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (16th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2025-65828?
CVE-2025-65828 affects Meatmeet Meatmeet Pro Wifi & Bluetooth Meat Thermometer Firmware. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2025-65828?
Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2025-65828 have an EU (EUVD) identifier?
Yes. CVE-2025-65828 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-202617.
When was CVE-2025-65828 published?
CVE-2025-65828 was published on 2025-12-10 and last updated on 2026-07-05.

References

EU advisories (EUVD)

Affected products (1)

More vulnerabilities in Meatmeet Meatmeet Pro Wifi & Bluetooth Meat Thermometer Firmware

All CVEs affecting Meatmeet Meatmeet Pro Wifi & Bluetooth Meat Thermometer Firmware →

Other CWE-306 (Missing Authentication for Critical Function) vulnerabilities

Browse all CWE-306 (Missing Authentication for Critical Function) vulnerabilities →