PT-2025-27041 · Flock Safety · Flock Safety Lpr

Gainsec · Published 2025-06-27 · Updated 2025-10-23 · CVE-2025-47823

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Flock Safety LPR devices with firmware through 2.2

Description: The issue concerns a hardcoded password for a system in Flock Safety LPR devices.

Recommendations: For Flock Safety LPR devices with firmware through 2.2, consider changing the hardcoded password as soon as possible to mitigate the risk of unauthorized access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-259

Related Identifiers

CVE-2025-47823

Affected Products

Flock Safety Lpr

References · 9

• https://osv.dev/vulnerability/CVE-2025-47823 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-47823 · Security Note
• https://flocksafety.com/articles/gunshot-detection-and-license-plate-reader-security-alert · Vendor Advisory
• https://gainsec.com/wp-content/uploads/2025/06/flock-safety-researcher-summary.pdf · Note
• https://t.me/cvetracker/27193 · Telegram Post
• https://gainsec.com/2025/06/19/grounded-flight-device-2-root-shell-on-flock-safetys-falcon-sparrow-automated-license-plate-reader · Note
• https://t.me/cveNotify/140043 · Telegram Post
• https://gainsec.com/2025/06/19/bird-hunting-season-security-research-on-flock-safety-anti-crime-systems · Note
• https://t.me/cvenotify/126831 · Telegram Post