CVE-2019-20473

2021-02-0120:13:13

mitre

github.com

tk-star q90 junior

gps horloge

sim card security

pin configuration

device vulnerability

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

JSON

An issue was discovered on TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. Any SIM card used with the device cannot have a PIN configured. If a PIN is configured, the device simply produces a “Remove PIN and restart!” message, and cannot be used. This makes it easier for an attacker to use the SIM card by stealing the device.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:h:tk-star:q90_junior_gps_horloge:-:*:*:*:*:*:*:*"
    ],
    "vendor": "tk-star",
    "product": "q90_junior_gps_horloge",
    "versions": [
      {
        "status": "affected",
        "version": "3.1042.9.8656"
      }
    ],
    "defaultStatus": "unknown"
  }
]