q90_junior_gps_horloge_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/q90_junior_gps_horloge_firmware/ Sun, 26 Feb 2023 06:32:25 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png q90_junior_gps_horloge_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/q90_junior_gps_horloge_firmware/ 32 32 CVE-2019-20468 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-20468/ Sun, 26 Feb 2023 06:32:25 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-20468/ An issue was discovered in SeTracker2 for TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. It has unnecessary permissions such as READ_EXTERNAL_STORAGE, WRITE_EXTERNAL_STORAGE, and READ_CONTACTS.

The post CVE-2019-20468 appeared first on CVE Vulnerability.

]]> An issue was discovered in SeTracker2 for TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. It has unnecessary permissions such as READ_EXTERNAL_STORAGE, WRITE_EXTERNAL_STORAGE, and READ_CONTACTS.

The post CVE-2019-20468 appeared first on CVE Vulnerability.

]]> CVE-2019-20470 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-20470/ Sun, 26 Feb 2023 06:32:25 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-20470/ An issue was discovered on TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. It performs actions based on certain SMS commands. This can be used to set up a voice communication channel from the watch to any telephone number, initiated by sending a specific SMS and using the default password, e.g., pw,,call, triggers an outbound call […]

The post CVE-2019-20470 appeared first on CVE Vulnerability.

]]> An issue was discovered on TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. It performs actions based on certain SMS commands. This can be used to set up a voice communication channel from the watch to any telephone number, initiated by sending a specific SMS and using the default password, e.g., pw,,call, triggers an outbound call from the watch. The password is sometimes available because of CVE-2019-20471.

The post CVE-2019-20470 appeared first on CVE Vulnerability.

]]> CVE-2019-20471 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-20471/ Sun, 26 Feb 2023 06:32:25 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-20471/ An issue was discovered on TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. When using the device at initial setup, a default password is used (123456) for administrative purposes. There is no prompt to change this password. Note that this password can be used in combination with CVE-2019-20470.

The post CVE-2019-20471 appeared first on CVE Vulnerability.

]]> An issue was discovered on TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. When using the device at initial setup, a default password is used (123456) for administrative purposes. There is no prompt to change this password. Note that this password can be used in combination with CVE-2019-20470.

The post CVE-2019-20471 appeared first on CVE Vulnerability.

]]> CVE-2019-20473 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-20473/ Sun, 26 Feb 2023 06:32:25 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-20473/ An issue was discovered on TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. Any SIM card used with the device cannot have a PIN configured. If a PIN is configured, the device simply produces a “Remove PIN and restart!” message, and cannot be used. This makes it easier for an attacker to use the SIM card […]

The post CVE-2019-20473 appeared first on CVE Vulnerability.

]]> An issue was discovered on TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. Any SIM card used with the device cannot have a PIN configured. If a PIN is configured, the device simply produces a “Remove PIN and restart!” message, and cannot be used. This makes it easier for an attacker to use the SIM card by stealing the device.

The post CVE-2019-20473 appeared first on CVE Vulnerability.

]]>