CVE-2025-65822
CVE-2025-65822
In short
The Meatmeet Pro device has JTAG debugging port left enabled on its ESP32 chip. An attacker with physical access can connect to this port and install malicious firmware, taking control of the device and potentially accessing the victim's Wi-Fi network.
Technical detail
JTAG interface is enabled on the ESP32 SoC in Meatmeet Pro, allowing an attacker with physical access to reflash the firmware and execute arbitrary code. This enables device compromise and potential unauthorized access to stored Wi-Fi credentials in the NVS partition, bypassing normal authentication mechanisms.
Summary generated and translated by AI from the official description.
The ESP32 system on a chip (SoC) that powers the Meatmeet Pro was found to have JTAG enabled. By leaving JTAG enabled on an ESP32 in a commercial product an attacker with physical access to the device can connect over this port and reflash the device's firmware with malicious code which will be executed upon running. As a result, the victim will lose access to the functionality of their device and the attack may gain unauthorized access to the victim's Wi-Fi network by re-connecting to the SSID defined in the NVS partition of the device.
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/aWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →