Flock cameras are riddled with security vulnerabilities and hardcoded creds

Flock ALPR cameras utilize an obsolete version of Android 8.1 and a Linux 3.18.71 kernel, leaving them unpatched for over eight years. Reverse-engineered filesystem images reveal hardcoded credentials and susceptibility to known security vulnerabilities, including CVE-2021-1905 and CVE-2018-9568, which allow for potential root escalation and full device control.