Flock Safety Falcon and Sparrow License Plate Readers OPM1.171019.026 ship with development Wi-Fi credentials (test_flck) stored in cleartext in production firmware.
References
| Link | Resource |
|---|---|
| https://gainsec.com/2025/09/27/fly-by-device-2-the-falcon-sparrow-gated-wireless-rce-camera-feed-dos-information-disclosure-and-more/ | Exploit Third Party Advisory |
| https://gainsec.com/wp-content/uploads/2025/09/Root-from-the-Coop-Device-3_-Root-Shell-on-Flock-Safetys-Bravo-Compute-Box-GainSec.pdf | Exploit Third Party Advisory |
| https://www.flocksafety.com/products | Product |
| https://www.flocksafety.com/products/license-plate-readers | Product |
Configurations
History
24 Oct 2025, 17:23
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:flocksafety:license_plate_reader_firmware:-:*:*:*:*:*:*:* | |
| References | () https://gainsec.com/2025/09/27/fly-by-device-2-the-falcon-sparrow-gated-wireless-rce-camera-feed-dos-information-disclosure-and-more/ - Exploit, Third Party Advisory | |
| References | () https://gainsec.com/wp-content/uploads/2025/09/Root-from-the-Coop-Device-3_-Root-Shell-on-Flock-Safetys-Bravo-Compute-Box-GainSec.pdf - Exploit, Third Party Advisory | |
| References | () https://www.flocksafety.com/products - Product | |
| References | () https://www.flocksafety.com/products/license-plate-readers - Product | |
| First Time |
Flocksafety license Plate Reader Firmware
Flocksafety |
02 Oct 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-312 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
02 Oct 2025, 17:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-10-02 17:16
Updated : 2025-10-24 17:23
NVD link : CVE-2025-59409
Mitre link : CVE-2025-59409
CVE.ORG link : CVE-2025-59409
JSON object : View
Products Affected
flocksafety
- license_plate_reader_firmware
CWE
CWE-312
Cleartext Storage of Sensitive Information