PT-2025-50537 · Espressif Systems+1 · Esp32+1

Published 2025-12-10 · Updated 2025-12-30 · CVE-2025-65829

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Meatmeet basestation devices with ESP32 system on a chip (affected versions not specified)

Description The ESP32 system on a chip used in Meatmeet basestation devices lacks Secure Boot functionality. Secure Boot verifies the authenticity of software during the startup process, establishing a chain of trust. The absence of this feature allows an attacker with physical access to modify the device's firmware and execute malicious code when the device starts.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2025-65829

Affected Products

Esp32

Meatmeet Basestation

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-65829 · Security Note
• https://osv.dev/vulnerability/CVE-2025-65829 · Vendor Advisory
• https://github.com/dead1nfluence/Meatmeet-Pro-Vulnerabilities/blob/main/Device/Secure-Boot-Disabled.md · Note
• https://gist.github.com/dead1nfluence/4dffc239b4a460f41a03345fd8e5feb5#file-secure-boot-disabled-md · Note
• https://t.me/cveNotify/147192 · Telegram Post
• https://twitter.com/CVEnew/status/2000248681489195511 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1998950841198186867 · Twitter Post