CVE-2024-36557: Authentication Bypass by Spoofing

The device ID is based on IMEI in Forever KidsWatch Call Me KW50 R36YDRA3PWGM7SV1.02019071516.19.24cobh and Forever KidsWatch Call Me 2 KW60 R36CWYDES4A292V1.02023.05.2422.49.44cobb. If a malicious user changes the IMEI to the IMEI of a unit they registered in the mobile app, it is possible to...

CVE-2024-36553: Channel Accessible by Non-Endpoint

Forever KidsWatch Call Me KW-50 R36YDRA3PWGM7SV1.02019071516.19.24cobh is vulnerable to MITM attack...

Forever CALL ME KW-50 安全漏洞

Forever CALL ME KW-50 is a children's phone watch from Forever. A security vulnerability exists in the Forever CALL ME KW-50 version R36YDRA3PWGM7SV1.02019071516.19.24cobh, which stems from vulnerability to MITM attacks...

CVE-2024-36556

The Forever KidsWatch Call Me KW50 (version 1.0) and Forever KidsWatch Call Me 2 KW60 (version 1.0) devices are affected by a hardcoded password vulnerability. This flaw stems from the use of fixed credentials within the software, which allows unauthorized access to the devices and poses a signif...

CVE-2024-36555

The Forever KidsWatch Call Me KW50 (version R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h) and Forever KidsWatch Call Me 2 KW-60 (version R36CW_YDE_S4_A29_2_V1.0_2023.05.24_22.49.44_cob_b) are vulnerable to a security flaw involving unverified privileges on built-in SMS-configuration commands....

CVE-2024-36557

The device ID is based on IMEI in Forever KidsWatch Call Me KW50 R36YDRA3PWGM7SV1.02019071516.19.24cobh and Forever KidsWatch Call Me 2 KW60 R36CWYDES4A292V1.02023.05.2422.49.44cobb. If a malicious user changes the IMEI to the IMEI of a unit they registered in the mobile app, it is possible to...

Forever CALL ME KW-50和Forever CALL ME KW-60 安全漏洞

The Forever CALL ME KW-50 and Forever CALL ME KW-60 are both children's phone watches from Forever. Forever CALL ME KW-50 R36YDRA3PWGM7SV1.02019071516.19.24cobh version and Forever CALL ME KW-60 R36CWYDES4A292V1.02023.05.2422.49.44 A security vulnerability exists in the cobb version that stems fr...

CVE-2024-36555

Built-in SMS-configuration command in Forever KidsWatch Call Me KW50 R36YDRA3PWGM7SV1.02019071516.19.24cobh and Forever KidsWatch Call Me 2 KW-60 R36CWYDES4A292V1.02023.05.2422.49.44cobb allows malicious users to change the device IMEI-number which allows for forging the identity of the device...

Forever CALL ME KW-50和Forever CALL ME KW-60 安全漏洞

The Forever CALL ME KW-50 and Forever CALL ME KW-60 are both children's phone watches from Forever. Forever CALL ME KW-50 R36YDRA3PWGM7SV1.02019071516.19.24cobh version and Forever CALL ME KW-60 R36CWYDES4A292V1.02023.05.2422.49.44 A security vulnerability exists in the cobb version, which stems...

PT-2025-5845 · Forever · Forever Kidswatch Call Me Kw50 +1

Name of the Vulnerable Software and Affected Versions: Forever KidsWatch Call Me KW-50 version R36 YDR A3PW GM7S V1.0 2019 07 15 16.19.24 cob h Forever KidsWatch Call Me KW-60 version R36CW YDE S4 A29 2 V1.0 2023.05.24 22.49.44 cob b Description: The issue allows a malicious user to obtain...

CVE-2024-36556

Forever KidsWatch Call Me KW50 R36YDRA3PWGM7SV1.02019071516.19.24cobh, and Forever KidsWatch Call Me 2 KW60 R36CWYDES4A292V1.02023.05.2422.49.44cobb have a Hardcoded password vulnerability...

CVE-2024-36553

Forever KidsWatch Call Me KW-50 R36YDRA3PWGM7SV1.02019071516.19.24cobh is vulnerable to MITM attack...

CVE-2024-36556

Forever KidsWatch Call Me KW50 R36YDRA3PWGM7SV1.02019071516.19.24cobh, and Forever KidsWatch Call Me 2 KW60 R36CWYDES4A292V1.02023.05.2422.49.44cobb have a Hardcoded password vulnerability...

CVE-2024-36553

The Forever KidsWatch Call Me KW-50 (specifically version R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h ) is vulnerable to a Man-In-The-Middle (MITM) attack. This type of attack allows a threat actor to intercept and potentially alter communication between two parties, which can lead to eavesd...

CVE-2024-36554

Forever KidsWatch Call Me KW-50 R36YDRA3PWGM7SV1.02019071516.19.24cobh and Forever KidsWatch Call Me KW-60 R36CWYDES4A292V1.02023.05.2422.49.44cobb allow a malicious user to gain information about the device by sending an SMS to the device which returns sensitive information...

Forever CALL ME KW-50 安全漏洞

Forever CALL ME KW-50 is a children's phone watch from Forever. Forever CALL ME KW-50 R36YDRA3PWGM7SV1.02019071516.19.24cobh version and Forever KidsWatch Call Me KW-60 R36CWYDES4A292V1.02023.05.24 A security vulnerability exists in version 22.49.44cobb. An attacker can exploit the vulnerability ...

CVE-2024-36558: Cleartext Transmission of Sensitive Information

Forever KidsWatch Call Me KW-50 R36YDRA3PWGM7SV1.02019071516.19.24cobh suffers from Cleartext Transmission of Sensitive Information due to lack of encryption in device-server communication...

CVE-2024-36556: Use of Hard-coded Credentials

Forever KidsWatch Call Me KW50 R36YDRA3PWGM7SV1.02019071516.19.24cobh, and Forever KidsWatch Call Me 2 KW60 R36CWYDES4A292V1.02023.05.2422.49.44cobb have a Hardcoded password vulnerability...

CVE-2024-36555: Missing Authentication for Critical Function

Built-in SMS-configuration command in Forever KidsWatch Call Me KW50 R36YDRA3PWGM7SV1.02019071516.19.24cobh and Forever KidsWatch Call Me 2 KW-60 R36CWYDES4A292V1.02023.05.2422.49.44cobb allows malicious users to change the device IMEI-number which allows for forging the identity of the device...

CVE-2024-36554: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Forever KidsWatch Call Me KW-50 R36YDRA3PWGM7SV1.02019071516.19.24cobh and Forever KidsWatch Call Me KW-60 R36CWYDES4A292V1.02023.05.2422.49.44cobb allow a malicious user to gain information about the device by sending an SMS to the device which returns sensitive information...