PT-2025-39455 · Flock Safety · Flock Safety Bravo Edge Ai Compute Device

Published 2025-09-25 · Updated 2025-09-26 · CVE-2025-59408

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Flock Safety Bravo Edge AI Compute Device version BRAVO 00.00 local 20241017

Description The Flock Safety Bravo Edge AI Compute Device version BRAVO 00.00 local 20241017 ships with Secure Boot disabled. This allows an attacker to flash modified firmware without cryptographic protections.

Recommendations Enable Secure Boot to prevent unauthorized firmware modifications.

Exploit

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2025-59408

Affected Products

Flock Safety Bravo Edge Ai Compute Device

References · 8

• 🔥 https://gainsec.com/2025/09/19/root-from-the-coop-device-3-root-shell-on-flock-safetys-bravo-compute-box · Exploit
• 🔥 https://gainsec.com/wp-content/uploads/2025/09/Root-from-the-Coop-Device-3_-Root-Shell-on-Flock-Safetys-Bravo-Compute-Box-GainSec.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-59408 · Security Note
• https://flocksafety.com/products · Note
• https://flocksafety.com/products/license-plate-readers · Note
• https://twitter.com/CVEnew/status/1971322261463499097 · Twitter Post
• https://t.me/cveNotify/136649 · Telegram Post
• https://t.me/CVEtracker/33379 · Telegram Post