What’s Vulnerable › Vulnerabilities

CVE-2025-59402

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-09-25 · updated 2026-06-17
• Weakness: CWE-616

Description

Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 accepts the default Thundercomm TurboX 6490 Firehose loader in EDL/QDL mode. This enables attackers with physical access to flash arbitrary firmware, dump partitions, and bypass bootloader and OS security controls.

Affected products

• Flocksafety Bravo Compute Box Firmware: all versions

References

• https://gainsec.com/2025/09/19/root-from-the-coop-device-3-root-shell-on-flock-safetys-bravo-compute-box/
• https://gainsec.com/wp-content/uploads/2025/09/Root-from-the-Coop-Device-3_-Root-Shell-on-Flock-Safetys-Bravo-Compute-Box-GainSec.pdf
• https://www.flocksafety.com/products
• https://www.flocksafety.com/products/license-plate-readers

Get alerted when CVE-2025-59402 or the next vulnerability affects your stack