BaseFortify

Publication date: 2025-10-02

Last updated on: 2025-10-24

Assigner: MITRE

Description

Flock Safety Falcon and Sparrow License Plate Readers OPM1.171019.026 ship with development Wi-Fi credentials (test_flck) stored in cleartext in production firmware.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-02

Last Modified

2025-10-24

Generated

2026-07-06

AI Q&A

2025-10-02

EPSS Evaluated

2026-07-05

NVD

CVE-2025-59409

EUVD

EUVD-2025-32577

Affected Vendors & Products

Vendor	Product	Version / Range
flocksafety	license_plate_reader_firmware	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-312	The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

Attack-Flow Graph

Executive Summary

This vulnerability involves Flock Safety Falcon and Sparrow License Plate Readers OPM1.171019.026 shipping with development Wi-Fi credentials (username: test_flck) stored in cleartext within the production firmware. This means that sensitive Wi-Fi credentials intended only for development or testing are embedded in the device firmware without encryption, potentially allowing unauthorized access.

Impact Analysis

The presence of development Wi-Fi credentials in cleartext in production devices can allow attackers to gain unauthorized access to the device's network or functionality. This could lead to unauthorized data access, manipulation of device operations, or further network compromise.

Hi! I’m here to help you understand CVE-2025-59409. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70