CVE-2024-36557

CVE-2024-36557 affects Forever KidsWatch Call Me KW50 and KW60 variants where the device ID is based on IMEI. A malicious user can hijack a registered unit by changing the IMEI to that of another unit in the mobile app, enabling remote control of the device via the app. The vulnerability is roote...