PT-2025-40410 · Flock Safety · Flock Safety Android Collins

Gainsec · Published 2025-10-02 · Updated 2025-10-24 · CVE-2025-59403

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Flock Safety Android Collins application (aka com.flocksafety.android.collins) version 6.35.31

Description The Flock Safety Android Collins application version 6.35.31 lacks authentication. It manages the camera feed on Falcon, Sparrow, and Bravo devices, but exposes administrative API endpoints on port 8080 without authentication. These endpoints include /reboot, /logs, /crashpack, and /adb/enable. Exploitation of the /reboot endpoint can lead to denial of service (DoS). The /logs endpoint allows for information disclosure. The /adb/enable endpoint enables adb over TCP without debugging confirmation, potentially granting an attacker on the local area network (LAN) or wireless LAN (WLAN) shell access.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Fix

DoS

RCE

Resource Exhaustion

Weakness Enumeration

CWE-400

CWE-749

Related Identifiers

CVE-2025-59403

Affected Products

Flock Safety Android Collins

References · 11

• 🔥 https://gainsec.com/wp-content/uploads/2025/09/Root-from-the-Coop-Device-3_-Root-Shell-on-Flock-Safetys-Bravo-Compute-Box-GainSec.pdf · Exploit
• 🔥 https://gainsec.com/2025/09/27/fly-by-device-2-the-falcon-sparrow-gated-wireless-rce-camera-feed-dos-information-disclosure-and-more · Exploit
• https://osv.dev/vulnerability/CVE-2025-59403 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-59403 · Security Note
• https://flocksafety.com/products · Note
• https://flocksafety.com/products/license-plate-readers · Note
• https://twitter.com/CVEnew/status/1973802343641579862 · Twitter Post
• https://twitter.com/SecAideInfo/status/1974779904395743348 · Twitter Post
• https://t.me/cveNotify/140248 · Telegram Post
• https://twitter.com/GainSec/status/1973810429253369900 · Twitter Post
• https://t.me/CVEtracker/33961 · Telegram Post