Vulnerabilities

TI-2025-36962 CVE-2025-59409 · GHSA-7m7v-cj32-7j8q

Flock Safety Falcon and Sparrow License Plate Readers OPM1.171019.026 ship with…

LOW 39

Flock Safety Falcon and Sparrow License Plate Readers OPM1.171019.026 ship with development Wi-Fi credentials (test_flck) stored in cleartext in production firmware.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00312 Published 2025-10-02 No fix listed CWE-312

TI-2025-36960 CVE-2025-59407 · GHSA-pv25-m64m-8qhp

The Flock Safety DetectionProcessing com.flocksafety.android.objects application 6.35.33…

MEDIUM 50

The Flock Safety DetectionProcessing com.flocksafety.android.objects application 6.35.33 for Android (installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices) bundles a Java Keystore (floc…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00672 Published 2025-10-02 No fix listed CWE-321

TI-2025-36959 CVE-2025-59406 · GHSA-34xp-hg92-v4qh

The Flock Safety Pisco com.flocksafety.android.pisco application 6.21.11 for Android…

LOW 27

The Flock Safety Pisco com.flocksafety.android.pisco application 6.21.11 for Android (installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices) has a cleartext Auth0 client secret in its co…

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.0017 Published 2025-10-02 No fix listed CWE-319

TI-2025-36958 CVE-2025-59405 · GHSA-qh2v-jcx5-rjm9

The Flock Safety Peripheral com.flocksafety.android.peripheral application 7.38.3 for…

HIGH 72

The Flock Safety Peripheral com.flocksafety.android.peripheral application 7.38.3 for Android (installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices) contains a cleartext DataDog API key…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00476 Published 2025-10-02 No fix listed CWE-200

TI-2025-36956 CVE-2025-59403 · GHSA-4q23-4xwf-899h

The Flock Safety Android Collins application (aka com.flocksafety.android.collins)…

HIGH 82

The Flock Safety Android Collins application (aka com.flocksafety.android.collins) 6.35.31 for Android lacks authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01067 Published 2025-10-02 No fix listed CWE-749

TI-2025-36961 CVE-2025-59408 · GHSA-7g8x-j62m-326m

Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with Secure…

LOW 32

Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with Secure Boot disabled.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00251 Published 2025-09-25 No fix listed CWE-327

TI-2025-36957 CVE-2025-59404 · GHSA-jg8j-m6mc-29m8

Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with its…

LOW 33

Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with its bootloader unlocked.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0043 Published 2025-09-25 No fix listed CWE-1274

TI-2025-36955 CVE-2025-59402 · GHSA-jggq-gvfm-qx6f

Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 accepts the default…

LOW 24

Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 accepts the default Thundercomm TurboX 6490 Firehose loader in EDL/QDL mode.

CVSS 3.1MEDIUM 5.4 Physical No auth User interaction EPSS 0.00232 Published 2025-09-25 No fix listed CWE-616

TI-2025-30277 CVE-2025-47824 · GHSA-xpjm-f7mq-g7wr

Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have cleartext storage of code.

LOW 11

Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have cleartext storage of code.

CVSS 3.1LOW 2.4 Physical No auth No interaction EPSS 0.00154 Published 2025-06-27 No fix listed CWE-312

TI-2025-30276 CVE-2025-47823 · GHSA-2mpq-2wx7-6333

Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have a hardcoded password for a system.

LOW 21

Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have a hardcoded password for a system.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00236 Published 2025-06-27 No fix listed CWE-259

TI-2025-30275 CVE-2025-47822 · GHSA-rvx5-r2p5-jx84

Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have an on-chip…

LOW 32

Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have an on-chip debug interface with improper access control.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00256 Published 2025-06-27 No fix listed CWE-1191

TI-2025-30274 CVE-2025-47821 · GHSA-cf2w-3vqv-mfr8

Flock Safety Gunshot Detection devices before 1.3 have a hardcoded password for a system.

LOW 21

Flock Safety Gunshot Detection devices before 1.3 have a hardcoded password for a system.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00225 Published 2025-06-27 Fixed in 1.3 CWE-259

TI-2025-30273 CVE-2025-47820 · GHSA-r2h4-4c8x-933j

Flock Safety Gunshot Detection devices before 1.3 have cleartext storage of code.

LOW 12

Flock Safety Gunshot Detection devices before 1.3 have cleartext storage of code.

CVSS 3.1LOW 2.4 Physical No auth No interaction EPSS 0.00159 Published 2025-06-27 Fixed in 1.3 CWE-312

TI-2025-30272 CVE-2025-47819 · GHSA-gwx6-666h-f6wc

Flock Safety Gunshot Detection devices before 1.3 have an on-chip debug interface with improper access control.

LOW 32

Flock Safety Gunshot Detection devices before 1.3 have an on-chip debug interface with improper access control.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00264 Published 2025-06-27 Fixed in 1.3 CWE-1191

TI-2025-30271 CVE-2025-47818 · GHSA-6r23-52v3-r282

Flock Safety Gunshot Detection devices before 1.3 have a hard-coded password for a connection.

LOW 21

Flock Safety Gunshot Detection devices before 1.3 have a hard-coded password for a connection.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00236 Published 2025-06-27 Fixed in 1.3 CWE-259

Vulnerabilities

Filters