This vulnerability allows an unauthenticated attacker in Bluetooth range of a Meatmeet device to issue several BLE commands that disrupt device availability. Commands include shutdown, restart, and clear config, with the latter removing user association and necessitating manual reconfiguration. The attack results in a Denial of Service by making the device unable to receive updates from the base station and cloud services. The CVSS 3.1 score is 6.5 (medium severity) with attack vector as adjacent network, low attack complexity, no privileges or user interaction required, and impact limited to availability only. No patch or remediation information is provided.

The vulnerability causes a Denial of Service by allowing attackers to remotely disable Meatmeet devices via BLE commands without authentication. This disrupts device operation and prevents update reception from the base station and cloud until the device is manually restored or reconfigured. There is no impact on confidentiality or integrity reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, physical security controls limiting attacker proximity to the device may reduce risk. Users should be prepared to manually reconfigure affected devices if disruption occurs.