Vulnerability Description
Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with its bootloader unlocked. This permits bypass of Android Verified Boot (AVB) and allows direct modification of partitions.
CVSS Score
7.5
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Flocksafety | Bravo Compute Box Firmware | - |
Related Weaknesses (CWE)
References
- https://gainsec.com/2025/09/19/root-from-the-coop-device-3-root-shell-on-flock-sExploitThird Party Advisory
- https://gainsec.com/wp-content/uploads/2025/09/Root-from-the-Coop-Device-3_-RootExploitThird Party Advisory
- https://www.flocksafety.com/productsProduct
- https://www.flocksafety.com/products/license-plate-readersProduct
FAQ
What is CVE-2025-59404?
CVE-2025-59404 is a vulnerability with a CVSS score of 7.5 (HIGH). Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with its bootloader unlocked. This permits bypass of Android Verified Boot (AVB) and allows direct modification of partitions...
How severe is CVE-2025-59404?
CVE-2025-59404 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-59404?
Check the references section above for vendor advisories and patch information. Affected products include: Flocksafety Bravo Compute Box Firmware.