Firmware Manipulation Vulnerability in Flock Safety Bravo Edge AI Compute Device
CVE-2025-59408

7.3HIGH

Key Information:

Vendor

Flock Safety

Status
Bravo Edge AI Compute Device
Vendor
CVE Published:
25 September 2025

What is CVE-2025-59408?

The Flock Safety Bravo Edge AI Compute Device, specifically version BRAVO_00.00_local_20241017, is shipped with Secure Boot disabled. This security oversight enables attackers to flash the device with unauthorized, modified firmware, lacking cryptographic protections. As a result, compromised devices could be exploited for malicious purposes, potentially leading to unauthorized access and data manipulation.

References

https://gainsec.com/wp-content/uploads/2025/09/Root-from-...
https://www.flocksafety.com/products
https://www.flocksafety.com/products/license-plate-readers

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.