Flock Safety 6.35.31 for Android
Approved changes feed: RSS · Atom
cpe:2.3:a:flocksafety:flock_safety:6.35.31:*:*:*:*:android:*:*
part: a version: 6.35.31 update: *
| Vendor | Flocksafety (4a0a2cbd-e8a4-5f76-9298-c457935958fe) |
|---|---|
| Product | Flock Safety (5ad747cc-bd62-5f86-884d-20fbd53e5ba1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | android |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-59403 |
vulnerable | 2026-06-08 07:35:21.853751 |
Details available
The Flock Safety Android Collins application (aka com.flocksafety.android.collins) 6.35.31 for Android lacks authentication. It is responsible for the camera feed on Falcon, Sparrow, and Bravo devices, but exposes administrative API endpoints on port 8080 without authentication. Endpoints include but are not limited to: /reboot, /logs, /crashpack, and /adb/enable. This results in multiple impacts including denial of service (DoS) via /reboot, information disclosure via /logs, and remote code execution (RCE) via /adb/enable. The latter specifically results in adb being started over TCP without debugging confirmation, providing an attacker in the LAN/WLAN with shell access.
Published: 2025-10-02T00:00:00.000Z
Updated: 2025-11-24T14:25:04.061Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.