Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-59360 State: PUBLISHED Published: 2025-09-15T11:40:52.625Z Last Updated: 2025-09-15T20:34:59.504Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Problem Types: CWE-78 Description: The killProcesses mutation in Chaos Controller Manager is vulnerable to OS command injection. In conjunction with CVE-2025-59358, this allows unauthenticated in-cluster attackers to perform remote code execution across the cluster. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/chaos-mesh/chaos-mesh/pull/4702 - https://jfrog.com/blog/chaotic-deputy-critical-vulnerabilities-in-chaos-mesh-lead-to-kubernetes-cluster-takeover
CVE ID: CVE-2025-59361 State: PUBLISHED Published: 2025-09-15T11:41:38.545Z Last Updated: 2025-09-15T20:35:31.294Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Problem Types: CWE-78 Description: The cleanIptables mutation in Chaos Controller Manager is vulnerable to OS command injection. In conjunction with CVE-2025-59358, this allows unauthenticated in-cluster attackers to perform remote code execution across the cluster. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/chaos-mesh/chaos-mesh/pull/4702 - https://jfrog.com/blog/chaotic-deputy-critical-vulnerabilities-in-chaos-mesh-lead-to-kubernetes-cluster-takeover
CVE ID: CVE-2025-59362 State: PUBLISHED Published: 2025-09-26T00:00:00.000Z Last Updated: 2025-09-29T15:30:05.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/squid-cache/squid/pull/2149 - https://github.com/Microsvuln/advisories/blob/main/CVE-2025-59362/CVE-2025-59362.md
CVE ID: CVE-2025-59363 State: PUBLISHED Published: 2025-09-14T00:00:00.000Z Last Updated: 2025-09-15T15:57:12.079Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: One Identity Products: OneLogin Problem Types: CWE-669 Description: In One Identity OneLogin before 2025.3.0, a request returns the OIDC client secret with GET Apps API v2 (even though this secret should only be returned when an App is first created), Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://onelogin.service-now.com/support?id=kb_article&sys_id=b0aad1e11bd3ea109a47ec29b04bcb72&kb_category=a0d76d70db185340d5505eea4b96199f
CVE ID: CVE-2025-59364 State: PUBLISHED Published: 2025-09-14T00:00:00.000Z Last Updated: 2025-09-15T15:57:53.693Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Express XSS Sanitizer project Products: Express XSS Sanitizer Problem Types: CWE-674 Description: The express-xss-sanitizer (aka Express XSS Sanitizer) package through 2.0.0 for Node.js has an unbounded recursion depth in sanitize in lib/sanitize.js for a JSON request body. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/AhmedAdelFahim/express-xss-sanitizer - https://www.npmjs.com/package/express-xss-sanitizer - https://gist.github.com/Spendroslav/177804eaef5acfb
ss-sanitizer - https://www.npmjs.com/package/express-xss-sanitizer - https://gist.github.com/Spendroslav/177804eaef5acfb222a550de212a1b94
CVE ID: CVE-2025-59365 State: PUBLISHED Published: 2025-11-25T07:27:50.339Z Last Updated: 2025-11-25T07:27:50.339Z Vendors: ASUS Products: Router Problem Types: CWE-121 Description: A stack buffer overflow vulnerability has been identified in certain router models. An authenticated attacker may trigger this vulnerability by sending a crafted request, potentially impacting the availability of the device. Refer to the ' Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information. References: - https://www.asus.com/security-advisory/
CVE ID: CVE-2025-59366 State: PUBLISHED Published: 2025-11-25T07:27:02.626Z Last Updated: 2025-11-25T07:27:02.626Z Vendors: ASUS Products: Router Problem Types: CWE-22, CWE-78 Description: An authentication-bypass vulnerability exists in AiCloud. This vulnerability can be triggered by an unintended side effect of the Samba functionality, potentially leading to allow execution of specific functions without proper authorization. Refer to the Security Update for ASUS Router Firmware section on the ASUS Security Advisory for more information. References: - https://www.asus.com/content/security-advisory/
CVE ID: CVE-2025-59367 State: PUBLISHED Published: 2025-11-13T02:09:55.309Z Last Updated: 2025-11-14T04:55:37.062Z Vendors: ASUS Products: DSL-AC51, DSL-N16, DSL-AC750 Problem Types: CWE-288 Description: An authentication bypass vulnerability has been identified in certain DSL series routers, may allow remote attackers to gain unauthorized access into the affected system. Refer to the 'Security Update for DSL Series Router' section on the ASUS Security Advisory for more information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.asus.com/security-advisory
CVE ID: CVE-2025-59368 State: PUBLISHED Published: 2025-11-25T07:29:09.256Z Last Updated: 2025-11-25T07:29:09.256Z Vendors: ASUS Products: Router Problem Types: CWE-191 Description: An integer underflow vulnerability has been identified in Aicloud. An authenticated attacker may trigger this vulnerability by sending a crafted request, potentially impacting the availability of the device. Refer to the ' Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information. References: - https://www.asus.com/security-advisory/
CVE ID: CVE-2025-59369 State: PUBLISHED Published: 2025-11-25T07:29:38.384Z Last Updated: 2025-11-25T07:29:38.384Z Vendors: ASUS Products: Router Problem Types: CWE-89 Description: A SQL injection vulnerability has been identified in bwdpi. A remote, authenticated attacker could leverage this vulnerability to potentially execute arbitrary SQL queries, leading to unauthorized data access. Refer to the 'Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information. References: - https://www.asus.com/security-advisory/
CVE ID: CVE-2025-59370 State: PUBLISHED Published: 2025-11-25T07:30:09.518Z Last Updated: 2025-11-25T07:30:09.518Z Vendors: ASUS Products: Router Problem Types: CWE-78 Description: A command injection vulnerability has been identified in bwdpi. A remote, authenticated attacker could leverage this vulnerability to potentially execute arbitrary commands, leading to the device executing unintended instructions. Refer to the 'Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information. References: - https://www.asus.com/security-advisory/
CVE ID: CVE-2025-59371 State: PUBLISHED Published: 2025-11-25T07:30:34.849Z Last Updated: 2025-11-25T07:30:34.849Z Vendors: ASUS Products: Router Problem Types: CWE-330 Description: An authentication bypass vulnerability has been identified in the IFTTT integration feature. A remote, authenticated attacker could leverage this vulnerability to potentially gain unauthorized access to the device. This vulnerability does not affect Wi-Fi 7 series models. Refer to the 'Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information. References: - https://www.asus.com/security-advisory/
CVE ID: CVE-2025-59372 State: PUBLISHED Published: 2025-11-25T07:30:54.219Z Last Updated: 2025-11-25T07:30:54.219Z Vendors: ASUS Products: Router Problem Types: CWE-22 Description: A path traversal vulnerability has been identified in certain router models. A remote, authenticated attacker could exploit this vulnerability to write files outside the intended directory, potentially affecting device integrity. Refer to the 'Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information. References: - https://www.asus.com/security-advisory/
CVE ID: CVE-2025-59373 State: PUBLISHED Published: 2025-11-25T02:03:36.980Z Last Updated: 2025-11-25T08:14:43.630Z Vendors: ASUS Products: MyASUS Problem Types: CWE-732 Description: A local privilege escalation vulnerability exists in the restore mechanism of ASUS System Control Interface. It can be triggered when an unprivileged actor copies files without proper validation into protected system paths, potentially leading to arbitrary files being executed as SYSTEM. For more information, please refer to section Security Update for MyASUS in the ASUS Security Advisory. References: - https://www.asus.com/content/security-advisory/
CVE ID: CVE-2025-59375 State: PUBLISHED Published: 2025-09-15T00:00:00.000Z Last Updated: 2025-11-04T21:13:49.823Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:H/RL:T/RC:C) Vendors: libexpat project Products: libexpat Problem Types: CWE-770 Description: libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/libexpat/libexpat/issues/1018 - https://github.com/libexpat/libexpat/pull/1034 - https://github.com/libexpat/libexpat/blob/676a4c531ec768732fac215da9730b5f50fbd2bf/ex
.com/libexpat/libexpat/pull/1034 - https://github.com/libexpat/libexpat/blob/676a4c531ec768732fac215da9730b5f50fbd2bf/expat/Changes#L45-L74 - https://issues.oss-fuzz.com/issues/439133977 - https://github.com/libexpat/libexpat/blob/R_2_7_2/expat/Changes
CVE ID: CVE-2025-59376 State: PUBLISHED Published: 2025-09-15T00:00:00.000Z Last Updated: 2025-09-15T15:10:46.266Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: feiskyer Products: mcp-kubernetes-server Problem Types: CWE-77 Description: feiskyer mcp-kubernetes-server through 0.1.11 does not consider chained commands in the implementation of --disable-write and --disable-delete, e.g., it allows a "kubectl version; kubectl delete pod" command because the first word (i.e., "version") is not a write or delete operation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/feiskyer/mcp-kubernetes-server/blob/78957b6c1a3982080cf6fcaac
- CISA ADP Vulnrichment: References: - https://github.com/feiskyer/mcp-kubernetes-server/blob/78957b6c1a3982080cf6fcaac6f6e9014116a71c/src/mcp_kubernetes_server/main.py#L106-L137 - https://github.com/william31212/CVE-Requests-1896609
CVE ID: CVE-2025-59377 State: PUBLISHED Published: 2025-09-15T00:00:00.000Z Last Updated: 2025-09-15T15:10:40.301Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: feiskyer Products: mcp-kubernetes-server Problem Types: CWE-78 Description: feiskyer mcp-kubernetes-server through 0.1.11 allows OS command injection, even in read-only mode, via /mcp/kubectl because shell=True is used. NOTE: this is unrelated to mcp-server-kubernetes and CVE-2025-53355. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/feiskyer/mcp-kubernetes-server/blob/78957b6c1a3982080cf6fcaac6f6e9014116a71c/src/mcp_kubernetes_server/command.py#L38 - https://githu
kubernetes-server/blob/78957b6c1a3982080cf6fcaac6f6e9014116a71c/src/mcp_kubernetes_server/command.py#L38 - https://github.com/william31212/CVE-Requests-1896609
CVE ID: CVE-2025-59378 State: PUBLISHED Published: 2025-09-15T00:00:00.000Z Last Updated: 2025-09-15T20:23:44.642Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: GNU Products: Guix Problem Types: CWE-669 Description: In guix-daemon in GNU Guix before 1618ca7, a content-addressed-mirrors file can be written to create a setuid program that allows a regular user to gain the privileges of the build user that runs it (even after the build has ended). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://guix.gnu.org/en/blog/2025/privilege-escalation-vulnerability-2025-2/ - https://codeberg.org/guix/guix/commit/1618ca7aa2ee8b6519ee9fd0b965e15ec
025/privilege-escalation-vulnerability-2025-2/ - https://codeberg.org/guix/guix/commit/1618ca7aa2ee8b6519ee9fd0b965e15eca2bfe45
CVE ID: CVE-2025-59392 State: PUBLISHED Published: 2025-11-06T00:00:00.000Z Last Updated: 2025-11-06T16:38:10.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Elspec G5 devices through 1.2.2.19, a person with physical access to the device can reset the Admin password by inserting a USB drive (containing a publicly documented reset string) into a USB port. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.elspec-ltd.com/metering-protection/g5-multi-functional-digital-fault-recorder/ - https://www.elspec-ltd.com/support/security-advisories/
CVE ID: CVE-2025-59396 State: REJECTED Published: 2025-11-06T00:00:00.000Z Last Updated: 2025-11-10T22:50:06.864Z Description: No description available.
CVE ID: CVE-2025-59397 State: PUBLISHED Published: 2025-09-15T00:00:00.000Z Last Updated: 2025-11-03T17:45:18.958Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: openwebanalytics Products: Open Web Analytics Problem Types: CWE-89 Description: Open Web Analytics (OWA) before 1.8.1 allows owa_db.php v[value] SQL injection. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.openwebanalytics.com - https://github.com/Open-Web-Analytics/Open-Web-Analytics/releases/tag/1.8.1 - https://github.com/Open-Web-Analytics/Open-Web-Analytics/compare/1.8.0...1.8.1 - https://github.com/Open-Web-Analytics/Open-Web-Analytics/com
en-Web-Analytics/Open-Web-Analytics/compare/1.8.0...1.8.1 - https://github.com/Open-Web-Analytics/Open-Web-Analytics/commit/1e5531522acb8f145627c9feb0175cf8a66561ba - https://seclists.org/fulldisclosure/2025/Oct/5 - https://www.seralys.com/research/CVE-2025-59397.txt
CVE ID: CVE-2025-59398 State: PUBLISHED Published: 2025-09-15T00:00:00.000Z Last Updated: 2025-09-15T18:39:57.439Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: EVerest Products: libocpp Problem Types: CWE-392 Description: The OCPP implementation in libocpp before 0.26.2 allows a denial of service (EVerest crash) via JSON input larger than 255 characters, because a CiString<255> object is created with StringTooLarge set to Throw. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/EVerest/everest-core/issues/1152 - https://github.com/EVerest/everest-core/commit/253432ae7458ad0445f68f9d716086090c2be49c - https://github.com/EVere
152 - https://github.com/EVerest/everest-core/commit/253432ae7458ad0445f68f9d716086090c2be49c - https://github.com/EVerest/libocpp/compare/v0.26.1...v0.26.2 - https://github.com/EVerest/libocpp/commit/fb391b4ff16a0a07150e5a8eebf0856fb6623cbe - https://github.com/EVerest/libocpp/pull/1052
CVE ID: CVE-2025-59399 State: PUBLISHED Published: 2025-09-15T00:00:00.000Z Last Updated: 2025-09-15T18:36:54.656Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: EVerest Products: libocpp Problem Types: CWE-460 Description: libocpp before 0.28.0 allows a denial of service (EVerest crash) because a secondary exception is thrown during error message generation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/EVerest/libocpp/commit/0b84d7f9fb3c338d470770f220a7b7f21db78878 - https://github.com/EVerest/libocpp/compare/v0.27.1...v0.28.0
CVE ID: CVE-2025-59402 State: PUBLISHED Published: 2025-09-25T00:00:00.000Z Last Updated: 2025-09-26T20:18:48.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 accepts the default Thundercomm TurboX 6490 Firehose loader in EDL/QDL mode. This enables attackers with physical access to flash arbitrary firmware, dump partitions, and bypass bootloader and OS security controls. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gainsec.com/wp-content/uploads/2025/09/Root-from-the-Coop-Device-3_-Root-Shell-on-Flock-Safetys-Bravo-Compute-Box-GainSec.pdf - https://www.flocksafety.com/products - ht
the-Coop-Device-3_-Root-Shell-on-Flock-Safetys-Bravo-Compute-Box-GainSec.pdf - https://www.flocksafety.com/products - https://www.flocksafety.com/products/license-plate-readers - https://gainsec.com/2025/09/19/root-from-the-coop-device-3-root-shell-on-flock-safetys-bravo-compute-box/
CVE ID: CVE-2025-59403 State: PUBLISHED Published: 2025-10-02T00:00:00.000Z Last Updated: 2025-11-24T14:25:04.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Flock Safety Android Collins application (aka com.flocksafety.android.collins) 6.35.31 for Android lacks authentication. It is responsible for the camera feed on Falcon, Sparrow, and Bravo devices, but exposes administrative API endpoints on port 8080 without authentication. Endpoints include but are not limited to: /reboot, /logs, /crashpack, and /adb/enable. This results in multiple impacts including denial of service (DoS) via /reboot, information disclosure via /logs, and remote code execution (RCE) via /adb/enab
ing denial of service (DoS) via /reboot, information disclosure via /logs, and remote code execution (RCE) via /adb/enable. The latter specifically results in adb being started over TCP without debugging confirmation, providing an attacker in the LAN/WLAN with shell access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gainsec.com/wp-content/uploads/2025/09/Root-from-the-Coop-Device-3_-Root-Shell-on-Flock-Safetys-Bravo-Compute-Box-GainSec.pdf - https://www.flocksafety.com/products - https://www.flocksafety.com/products/license-plate-readers - https://gainsec.com/2025/09/27/fly-by-device-2-the-falcon-sparrow-gated-wireless-rce-camera-feed-dos-information-disclosure-
s://gainsec.com/2025/09/27/fly-by-device-2-the-falcon-sparrow-gated-wireless-rce-camera-feed-dos-information-disclosure-and-more/
CVE ID: CVE-2025-59404 State: PUBLISHED Published: 2025-09-25T00:00:00.000Z Last Updated: 2025-09-26T20:22:47.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with its bootloader unlocked. This permits bypass of Android Verified Boot (AVB) and allows direct modification of partitions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gainsec.com/wp-content/uploads/2025/09/Root-from-the-Coop-Device-3_-Root-Shell-on-Flock-Safetys-Bravo-Compute-Box-GainSec.pdf - https://www.flocksafety.com/products - https://www.flocksafety.com/products/license-plate-readers - https://gainsec.com/202
ps://www.flocksafety.com/products - https://www.flocksafety.com/products/license-plate-readers - https://gainsec.com/2025/09/19/root-from-the-coop-device-3-root-shell-on-flock-safetys-bravo-compute-box/
CVE ID: CVE-2025-59405 State: PUBLISHED Published: 2025-10-02T00:00:00.000Z Last Updated: 2025-11-24T14:29:03.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Flock Safety Peripheral com.flocksafety.android.peripheral application 7.38.3 for Android (installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices) contains a cleartext DataDog API key within in its codebase. Because application binaries can be trivially decompiled or inspected, attackers can recover the OAuth secret without special privileges. This secret is intended to remain confidential and should never be embedded directly in client-side software. Additional Analyst Notes: - CISA
to remain confidential and should never be embedded directly in client-side software. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gainsec.com/wp-content/uploads/2025/09/Root-from-the-Coop-Device-3_-Root-Shell-on-Flock-Safetys-Bravo-Compute-Box-GainSec.pdf - https://www.flocksafety.com/products - https://www.flocksafety.com/products/license-plate-readers - https://gainsec.com/2025/09/27/fly-by-device-2-the-falcon-sparrow-gated-wireless-rce-camera-feed-dos-information-disclosure-and-more/
CVE ID: CVE-2025-59406 State: PUBLISHED Published: 2025-10-02T00:00:00.000Z Last Updated: 2025-10-02T19:46:27.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Flock Safety Pisco com.flocksafety.android.pisco application 6.21.11 for Android (installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices) has a cleartext Auth0 client secret in its codebase. Because application binaries can be trivially decompiled or inspected, attackers can recover this OAuth secret without special privileges. This secret is intended to remain confidential and should never be embedded directly in client-side software. Additional Analyst Notes: - CISA ADP Vulnrichment
dential and should never be embedded directly in client-side software. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gainsec.com/wp-content/uploads/2025/09/Root-from-the-Coop-Device-3_-Root-Shell-on-Flock-Safetys-Bravo-Compute-Box-GainSec.pdf - https://www.flocksafety.com/products - https://www.flocksafety.com/products/license-plate-readers - https://gainsec.com/2025/09/27/fly-by-device-2-the-falcon-sparrow-gated-wireless-rce-camera-feed-dos-information-disclosure-and-more/
CVE ID: CVE-2025-59407 State: PUBLISHED Published: 2025-10-02T00:00:00.000Z Last Updated: 2025-10-02T19:44:31.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Flock Safety DetectionProcessing com.flocksafety.android.objects application 6.35.33 for Android (installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices) bundles a Java Keystore (flock_rye.bks) along with its hardcoded password (flockhibiki17) in its code. The keystore contains a private key. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gainsec.com/wp-content/uploads/2025/09/Root-from-the-Coop-Device-3_-Root-Shell-on-Flock-Safetys-Bravo-Compute-Box-GainSec.
insec.com/wp-content/uploads/2025/09/Root-from-the-Coop-Device-3_-Root-Shell-on-Flock-Safetys-Bravo-Compute-Box-GainSec.pdf - https://www.flocksafety.com/products - https://www.flocksafety.com/products/license-plate-readers - https://gainsec.com/2025/09/27/fly-by-device-2-the-falcon-sparrow-gated-wireless-rce-camera-feed-dos-information-disclosure-and-more/
CVE ID: CVE-2025-59408 State: PUBLISHED Published: 2025-09-25T00:00:00.000Z Last Updated: 2025-09-26T20:27:57.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with Secure Boot disabled. This allows an attacker to flash modified firmware with no cryptographic protections. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gainsec.com/wp-content/uploads/2025/09/Root-from-the-Coop-Device-3_-Root-Shell-on-Flock-Safetys-Bravo-Compute-Box-GainSec.pdf - https://www.flocksafety.com/products - https://www.flocksafety.com/products/license-plate-readers - https://gainsec.com/2025/09/19/root-f
safety.com/products - https://www.flocksafety.com/products/license-plate-readers - https://gainsec.com/2025/09/19/root-from-the-coop-device-3-root-shell-on-flock-safetys-bravo-compute-box/
CVE ID: CVE-2025-59409 State: PUBLISHED Published: 2025-10-02T00:00:00.000Z Last Updated: 2025-10-02T19:41:46.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Flock Safety Falcon and Sparrow License Plate Readers OPM1.171019.026 ship with development Wi-Fi credentials (test_flck) stored in cleartext in production firmware. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gainsec.com/wp-content/uploads/2025/09/Root-from-the-Coop-Device-3_-Root-Shell-on-Flock-Safetys-Bravo-Compute-Box-GainSec.pdf - https://www.flocksafety.com/products - https://www.flocksafety.com/products/license-plate-readers - https://gainsec.com/2025/09/27/fly-by-device-2-the-falcon-s
https://www.flocksafety.com/products/license-plate-readers - https://gainsec.com/2025/09/27/fly-by-device-2-the-falcon-sparrow-gated-wireless-rce-camera-feed-dos-information-disclosure-and-more/