Approved changes feed: RSS · Atom

cpe:2.3:h:tk-star:q90_junior_gps_horloge:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorTk Star (555abfa3-b325-5a2d-9465-46af511eca1a)
ProductQ90 Junior Gps Horloge (cf3d3e1a-28b9-5438-adbc-93b4076c235a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-20473 not_vulnerable 2026-06-08 05:13:40.673923 Details available
An issue was discovered on TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. Any SIM card used with the device cannot have a PIN configured. If a PIN is configured, the device simply produces a "Remove PIN and restart!" message, and cannot be used. This makes it easier for an attacker to use the SIM card by stealing the device.
Published: 2021-02-01T20:13:13.000Z
Updated: 2024-08-05T02:39:10.095Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-20473 vulnerable 2026-06-08 05:13:40.673847 Details available
An issue was discovered on TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. Any SIM card used with the device cannot have a PIN configured. If a PIN is configured, the device simply produces a "Remove PIN and restart!" message, and cannot be used. This makes it easier for an attacker to use the SIM card by stealing the device.
Published: 2021-02-01T20:13:13.000Z
Updated: 2024-08-05T02:39:10.095Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-20471 not_vulnerable 2026-06-08 05:13:40.672979 Details available
An issue was discovered on TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. When using the device at initial setup, a default password is used (123456) for administrative purposes. There is no prompt to change this password. Note that this password can be used in combination with CVE-2019-20470.
Published: 2021-02-01T20:10:12.000Z
Updated: 2024-08-08T17:42:37.433Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-20470 not_vulnerable 2026-06-08 05:13:40.672418 Details available
An issue was discovered on TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. It performs actions based on certain SMS commands. This can be used to set up a voice communication channel from the watch to any telephone number, initiated by sending a specific SMS and using the default password, e.g., pw,<password>,call,<mobile_number> triggers an outbound call from the watch. The password is sometimes available because of CVE-2019-20471.
Published: 2021-02-01T20:03:48.000Z
Updated: 2024-08-05T02:39:10.089Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-20468 not_vulnerable 2026-06-08 05:13:40.671320 Details available
An issue was discovered in SeTracker2 for TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. It has unnecessary permissions such as READ_EXTERNAL_STORAGE, WRITE_EXTERNAL_STORAGE, and READ_CONTACTS.
Published: 2021-02-01T20:18:40.000Z
Updated: 2024-08-05T02:39:10.102Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.