meatmeet · threatengine.sh

Home/Product/meatmeet pro wifi \& bluetooth meat thermometer

Product

meatmeet pro wifi \& bluetooth meat thermometer

13 known vulnerabilities across versions

Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.

Sort Min CVSS Published since

The mobile application insecurely handles information stored within memory. By performing a memory dump on the application after a

The application uses an insecure hashing algorithm (MD5) to hash passwords. If an attacker obtained a copy of these hashes, either

Due to a lack of certificate validation, all traffic from the mobile application can be intercepted. As a result, an adversary loc

The ESP32 system on a chip (SoC) that powers the Meatmeet basestation device was found to lack Secure Boot. The Secure Boot featur

An unauthenticated attacker within proximity of the Meatmeet device can issue several commands over Bluetooth Low Energy (BLE) to

The mobile application is configured to allow clear text traffic to all domains and communicates with an API server over HTTP. As

The mobile application was found to contain stored credentials for the network it was developed on. If an attacker retrieved this,

The firmware on the basestation of the Meatmeet is not encrypted. An adversary with physical access to the Meatmeet device can dis

An unauthenticated attacker within proximity of the Meatmeet device can perform an unauthorized Over The Air (OTA) firmware upgrad

The Meatmeet Pro was found to be shipped with hardcoded Wi-Fi credentials in the firmware, for the test network it was developed o

The ESP32 system on a chip (SoC) that powers the Meatmeet Pro was found to have JTAG enabled. By leaving JTAG enabled on an ESP32

As UART download mode is still enabled on the ESP32 chip on which the firmware runs, an adversary can dump the flash from the devi

An issue was discovered in Meatmeet Android Mobile Application 1.1.2.0. An exported activity can be spawned with the mobile applic

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin