PT-2025-40413 · Flock Safety · Detectionprocessing +3

Gainsec · Published 2025-10-02 · Updated 2025-10-24 · CVE-2025-59407

Positive Technologies · (AI Summary)

CVSS v3.1

9.8

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Flock Safety DetectionProcessing application version 6.35.33

Description The Flock Safety DetectionProcessing application for Android version 6.35.33, used on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices, includes a Java Keystore (

flock rye.bks

) with a hardcoded password (

flockhibiki17

) within its code. This keystore contains a private key.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-321

Related Identifiers

CVE-2025-59407

Affected Products

Bravo Edge Ai Compute Device

Detectionprocessing

Falcon

Sparrow License Plate Readers

References · 9

• 🔥 https://gainsec.com/wp-content/uploads/2025/09/Root-from-the-Coop-Device-3_-Root-Shell-on-Flock-Safetys-Bravo-Compute-Box-GainSec.pdf · Exploit
• 🔥 https://gainsec.com/2025/09/27/fly-by-device-2-the-falcon-sparrow-gated-wireless-rce-camera-feed-dos-information-disclosure-and-more · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-59407 · Security Note
• https://t.me/cveNotify/140241 · Telegram Post
• https://t.me/CVEtracker/33964 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1973952315057951187 · Twitter Post
• https://flocksafety.com/products/license-plate-readers · Note
• https://flocksafety.com/products · Note
• https://twitter.com/CVEnew/status/1973802346623721603 · Twitter Post