Meatmeet Pro WiFi & Bluetooth Meat Thermometer Firmware vulnerabilities
3 known vulnerabilities in Meatmeet Pro WiFi & Bluetooth Meat Thermometer Firmware from Meatmeet. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Meatmeet Pro WiFi & Bluetooth Meat Thermometer…: Missing Authentication for Critical Functionality
An unauthenticated attacker within proximity of the Meatmeet device can perform an unauthorized Over The Air (OTA) firmware upgrade using Bluetooth Low Energy (BLE), resulting in the firmware on the device being overwritten with the attacker's code. As the dev
- 9.8 Critical severity
Meatmeet Pro WiFi & Bluetooth Meat Thermometer…: Use of Hard-coded Credentials
The Meatmeet Pro was found to be shipped with hardcoded Wi-Fi credentials in the firmware, for the test network it was developed on. If an attacker retrieved this, and found the physical location of the Wi-Fi network, they could gain unauthorized access to the
- 7.5 High severity
Meatmeet Pro WiFi & Bluetooth Meat Thermometer…: On-Chip Debug and Test Interface With Improper Access Control
As UART download mode is still enabled on the ESP32 chip on which the firmware runs, an adversary can dump the flash from the device and retrieve sensitive information such as details about the current and previous Wi-Fi network from the NVS partition. Additio