Vulnerability Description
Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with Secure Boot disabled. This allows an attacker to flash modified firmware with no cryptographic protections.
CVSS Score
7.3
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Flocksafety | Bravo Compute Box Firmware | - |
Related Weaknesses (CWE)
References
- https://gainsec.com/2025/09/19/root-from-the-coop-device-3-root-shell-on-flock-sExploitThird Party Advisory
- https://gainsec.com/wp-content/uploads/2025/09/Root-from-the-Coop-Device-3_-RootExploitThird Party Advisory
- https://www.flocksafety.com/productsProduct
- https://www.flocksafety.com/products/license-plate-readersProduct
FAQ
What is CVE-2025-59408?
CVE-2025-59408 is a vulnerability with a CVSS score of 7.3 (HIGH). Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with Secure Boot disabled. This allows an attacker to flash modified firmware with no cryptographic protections.
How severe is CVE-2025-59408?
CVE-2025-59408 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-59408?
Check the references section above for vendor advisories and patch information. Affected products include: Flocksafety Bravo Compute Box Firmware.