CVE-2025-59409
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-10-02

Last updated on: 2025-10-24

Assigner: MITRE

Description
Flock Safety Falcon and Sparrow License Plate Readers OPM1.171019.026 ship with development Wi-Fi credentials (test_flck) stored in cleartext in production firmware.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-10-02
Last Modified
2025-10-24
Generated
2026-06-16
AI Q&A
2025-10-02
EPSS Evaluated
2026-06-15
NVD
CVE-2025-59409
EUVD
EUVD-2025-32577
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
flocksafety license_plate_reader_firmware *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-312 The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability involves Flock Safety Falcon and Sparrow License Plate Readers OPM1.171019.026 shipping with development Wi-Fi credentials (username: test_flck) stored in cleartext within the production firmware. This means that sensitive Wi-Fi credentials intended only for development or testing are embedded in the device firmware without encryption, potentially allowing unauthorized access.

Impact Analysis

The presence of development Wi-Fi credentials in cleartext in production devices can allow attackers to gain unauthorized access to the device's network or functionality. This could lead to unauthorized data access, manipulation of device operations, or further network compromise.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-59409. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart