CVE-2025-59403

CRITICAL EPSS 58.6%

Published Oct 2, 20259mo ago · Modified Jun 17, 20261w ago

9.8 CVSS 3.1

Critical

Published Oct 2, 2025 9mo ago

Last Modified Jun 17, 2026 1w ago

Description

The Flock Safety Android Collins application (aka com.flocksafety.android.collins) 6.35.31 for Android lacks authentication. It is responsible for the camera feed on Falcon, Sparrow, and Bravo devices, but exposes administrative API endpoints on port 8080 without authentication. Endpoints include but are not limited to: /reboot, /logs, /crashpack, and /adb/enable. This results in multiple impacts including denial of service (DoS) via /reboot, information disclosure via /logs, and remote code execution (RCE) via /adb/enable. The latter specifically results in adb being started over TCP without debugging confirmation, providing an attacker in the LAN/WLAN with shell access.

CVSS Details

Base Score

9.8

Exploitability

3.9

Impact

5.9

Vector string

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector Network

Attack Complexity Low

Privileges Required None

User Interaction None

Scope Unchanged

Confidentiality High

Integrity High

Availability High

Threat Intelligence

EPSS Exploit Probability

58.6% percentile

Exploit & Patch Status

Public Exploit Known

No Patch Available

Weaknesses 1

CWE-749

Affected Products 1

Vendor	Product	Version	Range
flocksafety	flock_safety	6.35.31	any

References 4

gainsec.com https://gainsec.com/2025/09/27/fly-by-device-2-the-falcon-sparrow-gated-wireless-rce-camera-feed-dos-information-disclosure-and-more/

ExploitThird Party Advisory
gainsec.com https://gainsec.com/wp-content/uploads/2025/09/Root-from-the-Coop-Device-3_-Root-Shell-on-Flock-Safetys-Bravo-Compute-Box-GainSec.pdf

ExploitThird Party Advisory
flocksafety.com https://www.flocksafety.com/products

Product
flocksafety.com https://www.flocksafety.com/products/license-plate-readers

Product

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.