MEDIUM Published September 25, 2025

CVE-2025-59402

Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 accepts the default Thundercomm TurboX 6490 Firehose loader in EDL/QDL mode. This enables attackers with physical access to flash arbitrary firmware, dump partitions, and bypass bootloader and OS security controls.

CVSS base score

5.4 (v3.1)

Severity

MEDIUM

Attack vector

Physical

Weakness

CWE-616

Last modified

November 5, 2026

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L

Affected products

flocksafety bravo compute box firmware

References

gainsec.com Exploit, Third Party Advisory
gainsec.com Exploit, Third Party Advisory
www.flocksafety.com Product
www.flocksafety.com Product

View full NVD advisory →

More flocksafety vulnerabilities

Published the same day

← Back to CVE watch

CVE-2025-59402

Affected products

References

More flocksafety vulnerabilities

Published the same day

Related reading