CVE Database
/

CVE-2025-21608

Back to search

CVE-2025-21608

Published: Feb 18, 2025

Modified: Feb 19, 2025

PUBLISHED

Description

Meshtastic is an open source mesh networking solution. In affected firmware versions crafted packets over MQTT are able to appear as a DM in client to a node even though they were not decoded with PKC. This issue has been addressed in version 2.5.19 and all users are advised to upgrade. There are no known workarounds for this vulnerability.

VendorProductVersions

meshtastic

firmware

affected
>= 2.5.0, <= 2.5.18

Weaknesses (CWE)

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now