PT-2025-40413 · Flock Safety · Bravo Edge Ai Compute Device+3

Gainsec · Publicado 2025-10-02 · Atualizado 2025-10-24 · CVE-2025-59407

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Flock Safety DetectionProcessing application version 6.35.33

Description The Flock Safety DetectionProcessing application for Android version 6.35.33, used on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices, includes a Java Keystore (flock rye.bks) with a hardcoded password (flockhibiki17) within its code. This keystore contains a private key.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-321

Identificadores relacionados

CVE-2025-59407

Produtos afetados

Bravo Edge Ai Compute Device

Detectionprocessing

Falcon

Sparrow License Plate Readers

Referências · 10

• 🔥 https://gainsec.com/wp-content/uploads/2025/09/Root-from-the-Coop-Device-3_-Root-Shell-on-Flock-Safetys-Bravo-Compute-Box-GainSec.pdf · Exploit
• 🔥 https://gainsec.com/2025/09/27/fly-by-device-2-the-falcon-sparrow-gated-wireless-rce-camera-feed-dos-information-disclosure-and-more · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-59407 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/1973952315057951187 · Publicação no Twitter
• https://t.me/CVEtracker/33964 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-59407 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1973802346623721603 · Publicação no Twitter
• https://t.me/cveNotify/140241 · Publicação no Telegram
• https://flocksafety.com/products · Nota
• https://flocksafety.com/products/license-plate-readers · Nota