TK-STAR Q90 Junior GPS Horloge Firmware 3.1042.9.8656
Approved changes feed: RSS · Atom
cpe:2.3:o:tk-star:q90_junior_gps_horloge_firmware:3.1042.9.8656:*:*:*:*:*:*:*part: o version: 3.1042.9.8656 update: *
| Vendor | Tk Star (555abfa3-b325-5a2d-9465-46af511eca1a) |
|---|---|
| Product | Q90 Junior Gps Horloge Firmware (83a8306c-b75f-5053-a694-94a5dab6aee0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-20473 |
vulnerable | 2026-06-08 05:13:40.673902 |
Details available
An issue was discovered on TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. Any SIM card used with the device cannot have a PIN configured. If a PIN is configured, the device simply produces a "Remove PIN and restart!" message, and cannot be used. This makes it easier for an attacker to use the SIM card by stealing the device.
Published: 2021-02-01T20:13:13.000Z
Updated: 2024-08-05T02:39:10.095Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20471 |
vulnerable | 2026-06-08 05:13:40.672918 |
Details available
An issue was discovered on TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. When using the device at initial setup, a default password is used (123456) for administrative purposes. There is no prompt to change this password. Note that this password can be used in combination with CVE-2019-20470.
Published: 2021-02-01T20:10:12.000Z
Updated: 2024-08-08T17:42:37.433Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20470 |
vulnerable | 2026-06-08 05:13:40.672351 |
Details available
An issue was discovered on TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. It performs actions based on certain SMS commands. This can be used to set up a voice communication channel from the watch to any telephone number, initiated by sending a specific SMS and using the default password, e.g., pw,<password>,call,<mobile_number> triggers an outbound call from the watch. The password is sometimes available because of CVE-2019-20471.
Published: 2021-02-01T20:03:48.000Z
Updated: 2024-08-05T02:39:10.089Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20468 |
vulnerable | 2026-06-08 05:13:40.670386 |
Details available
An issue was discovered in SeTracker2 for TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. It has unnecessary permissions such as READ_EXTERNAL_STORAGE, WRITE_EXTERNAL_STORAGE, and READ_CONTACTS.
Published: 2021-02-01T20:18:40.000Z
Updated: 2024-08-05T02:39:10.102Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.