Cyber Resilience

CVE-2025-47822

Medium

Published: 27 June 2025

Published
27 June 2025
Modified
23 October 2025
KEV Added
—
Patch
—
CVSS Score v3.1 6.4 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0013 31.3th percentile
Risk Priority 13 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2025-47822 is a medium-severity On-Chip Debug and Test Interface With Improper Access Control (CWE-1191) vulnerability in Flocksafety License Plate Reader Firmware. Its CVSS base score is 6.4 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 31.3th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have an on-chip debug interface with improper access control.

CWE(s)
CWE-1191

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1068 Exploitation for Privilege Escalation Privilege Escalation
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
attack.mitre.org →
T1059.004 Unix Shell Execution
Adversaries may abuse Unix shell commands and scripts for execution.
attack.mitre.org →
Why these techniques?

The improper access control on the on-chip debug interface allows physical access to enable USB debug modes (e.g., fastboot, recovery), leading to root shell access, which facilitates exploitation for privilege escalation (T1068) and command execution via Unix shell (T1059.004).

Affected Assets

flocksafety
license plate reader firmware
≤ 2.2

Mitigating Controls

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

SC-41 Port and I/O Device Access
addresses: CWE-1191

Directly mitigates exposure of on-chip debug and test interfaces by disabling or removing them.

SR-10 Inspection of Systems or Components
addresses: CWE-1191

Inspection of on-chip debug/test interfaces can identify tampering or unauthorized access that those interfaces enable.

References