Cleartext Development Credentials in Flock Safety License Plate Readers
CVE-2025-59409

7.5HIGH

Key Information:

Vendor

Flock Safety

Status
Falcon and Sparrow License Plate Readers
Vendor
CVE Published:
2 October 2025

What is CVE-2025-59409?

Flock Safety's Falcon and Sparrow License Plate Readers are impacted by a significant vulnerability where development Wi-Fi credentials are stored in cleartext within the production firmware. This flaw potentially allows unauthorized access to network resources and compromises the security of the device, making it crucial for users to assess their deployments and implement necessary mitigations immediately.

References

https://gainsec.com/wp-content/uploads/2025/09/Root-from-...
https://www.flocksafety.com/products
https://www.flocksafety.com/products/license-plate-readers

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.