HIGH🇵🇱 Wersja polska

CVE-2025-59408

CVSS 7.3v3.1pub. 2025-09-25upd. 2025-10-23

Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with Secure Boot disabled. This allows an attacker to flash modified firmware with no cryptographic protections.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

  • Flocksafety Bravo Compute Box Firmware

    APP
    Flocksafety
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2025-59404HIGH7.5same product

Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with its bootloader unlocked. This ...

CVE-2025-59402MEDIUM5.4same product

Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 accepts the default Thundercomm TurboX 64...

CVE-2025-59403CRITICAL9.8PL ✓same vendor

Brak uwierzytelnienia w aplikacji Flock Safety Collins — RCE i DoS

CVE-2025-59407CRITICAL9.8PL ✓same vendor

Hardcoded hasło do Java Keystore w aplikacji Flock Safety na Android

CVE-2025-59405HIGH7.5same vendor

The Flock Safety Peripheral com.flocksafety.android.peripheral application 7.38.3 for Android (installed on Fa...