CVE-2025-59403

{
  "id": "CVE-2025-59403",
  "sourceIdentifier": "[email protected]",
  "published": "2025-10-02T17:16:05.530",
  "lastModified": "2026-11-05T23:10:00.150",
  "vulnStatus": "Modified",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Flock Safety Android Collins application (aka com.flocksafety.android.collins) 6.35.31 for Android lacks authentication. It is responsible for the camera feed on Falcon, Sparrow, and Bravo devices, but exposes administrative API endpoints on port 8080 without authentication. Endpoints include but are not limited to: /reboot, /logs, /crashpack, and /adb/enable. This results in multiple impacts including denial of service (DoS) via /reboot, information disclosure via /logs, and remote code execution (RCE) via /adb/enable. The latter specifically results in adb being started over TCP without debugging confirmation, providing an attacker in the LAN/WLAN with shell access."
    },
    {
      "lang": "es",
      "value": "La aplicación Flock Safety Android Collins (también conocida como com.flocksafety.android.collins) 6.35.31 para Android carece de autenticación. Es responsable de la transmisión de la cámara en dispositivos Falcon, Sparrow y Bravo, pero expone endpoints de API administrativos en el puerto 8080 sin autenticación. Los endpoints incluyen, entre otros: /reboot, /logs, /crashpack y /adb/enable. Esto resulta en múltiples impactos, incluyendo denegación de servicio (DoS) a través de /reboot, revelación de información a través de /logs, y ejecución remota de código (RCE) a través de /adb/enable. Esto último resulta específicamente en que adb se inicie sobre TCP sin confirmación de depuración, proporcionando a un atacante en la LAN/WLAN con acceso de shell."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "version": "n/a",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2025-11-24T14:23:53.992750Z",
          "id": "CVE-2025-59403",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-749"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:flocksafety:flock_safety:6.35.31:*:*:*:*:android:*:*",
              "matchCriteriaId": "F724C2F3-8820-4EEA-9AB2-9CFA8AD32A35"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://gainsec.com/2025/09/27/fly-by-device-2-the-falcon-sparrow-gated-wireless-rce-camera-feed-dos-information-disclosure-and-more/",
      "source": "[email protected]",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ]
    },
    {
      "url": "https://gainsec.com/wp-content/uploads/2025/09/Root-from-the-Coop-Device-3_-Root-Shell-on-Flock-Safetys-Bravo-Compute-Box-GainSec.pdf",
      "source": "[email protected]",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ]
    },
    {
      "url": "https://www.flocksafety.com/products",
      "source": "[email protected]",
      "tags": [
        "Product"
      ]
    },
    {
      "url": "https://www.flocksafety.com/products/license-plate-readers",
      "source": "[email protected]",
      "tags": [
        "Product"
      ]
    }
  ]
}