Vendors / Flock Safety Records 15 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 4
Exploited now Flock Safety records in CISA KEV No Flock Safety vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
The Flock Safety Android Collins application (aka com.flocksafety.android.collins) 6.35.31 for Android lacks authentication.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01067 · Published 2025-10-02 · No fix listed CWE-749
Priority HIGH 72
The Flock Safety Peripheral com.flocksafety.android.peripheral application 7.38.3 for Android (installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices) contains a cleartext DataDog API key…
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00476 · Published 2025-10-02 · No fix listed CWE-200
Priority MEDIUM 50
The Flock Safety DetectionProcessing com.flocksafety.android.objects application 6.35.33 for Android (installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices) bundles a Java Keystore (floc…
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00672 · Published 2025-10-02 · No fix listed CWE-321
Priority LOW 39
Flock Safety Falcon and Sparrow License Plate Readers OPM1.171019.026 ship with development Wi-Fi credentials (test_flck) stored in cleartext in production firmware.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00312 · Published 2025-10-02 · No fix listed CWE-312
Priority LOW 33
Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with its bootloader unlocked.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0043 · Published 2025-09-25 · No fix listed CWE-1274
Priority LOW 32
Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with Secure Boot disabled.
CVSS 3.1 HIGH 7.3· Network · No auth · No interaction · EPSS 0.00251 · Published 2025-09-25 · No fix listed CWE-327
Priority LOW 32
Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have an on-chip debug interface with improper access control.
CVSS 3.1 MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00256 · Published 2025-06-27 · No fix listed CWE-1191
Priority LOW 32
Flock Safety Gunshot Detection devices before 1.3 have an on-chip debug interface with improper access control.
CVSS 3.1 MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00264 · Published 2025-06-27 · Fixed in 1.3 CWE-1191
Priority LOW 27
The Flock Safety Pisco com.flocksafety.android.pisco application 6.21.11 for Android (installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices) has a cleartext Auth0 client secret in its co…
CVSS 3.1 MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.0017 · Published 2025-10-02 · No fix listed CWE-319
Priority LOW 24
Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 accepts the default Thundercomm TurboX 6490 Firehose loader in EDL/QDL mode.
CVSS 3.1 MEDIUM 5.4· Physical · No auth · User interaction · EPSS 0.00232 · Published 2025-09-25 · No fix listed CWE-616
Priority LOW 21
Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have a hardcoded password for a system.
CVSS 3.1 MEDIUM 4.6· Physical · No auth · No interaction · EPSS 0.00236 · Published 2025-06-27 · No fix listed CWE-259
Priority LOW 21
Flock Safety Gunshot Detection devices before 1.3 have a hardcoded password for a system.
CVSS 3.1 MEDIUM 4.6· Physical · No auth · No interaction · EPSS 0.00225 · Published 2025-06-27 · Fixed in 1.3 CWE-259
Priority LOW 21
Flock Safety Gunshot Detection devices before 1.3 have a hard-coded password for a connection.
CVSS 3.1 MEDIUM 4.6· Physical · No auth · No interaction · EPSS 0.00236 · Published 2025-06-27 · Fixed in 1.3 CWE-259
Priority LOW 12
Flock Safety Gunshot Detection devices before 1.3 have cleartext storage of code.
CVSS 3.1 LOW 2.4· Physical · No auth · No interaction · EPSS 0.00159 · Published 2025-06-27 · Fixed in 1.3 CWE-312
Priority LOW 11
Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have cleartext storage of code.
CVSS 3.1 LOW 2.4· Physical · No auth · No interaction · EPSS 0.00154 · Published 2025-06-27 · No fix listed CWE-312
Open these records in search → All records by CVSS severity
2 4 7 2 0
THREATIST.IORead the docs