Vulnerability in Flock Safety Bravo Edge AI Compute Device
CVE-2025-59402

5.4MEDIUM

Key Information:

Vendor

Flock Safety

Status
Bravo Edge AI Compute Device
Vendor
CVE Published:
25 September 2025

What is CVE-2025-59402?

The Flock Safety Bravo Edge AI Compute Device, specifically version BRAVO_00.00_local_20241017, contains a vulnerability that allows attackers with physical access to exploit the device's default Thundercomm TurboX 6490 Firehose loader in EDL/QDL mode. This exploitation can lead to unauthorized flashing of firmware, the capability to dump sensitive partitions, and potential bypassing of critical bootloader and operating system security measures, making the device susceptible to a range of attacks.

References

https://gainsec.com/wp-content/uploads/2025/09/Root-from-...
https://www.flocksafety.com/products
https://www.flocksafety.com/products/license-plate-readers

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.