CVSS 3.1
6.6 mediumCVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2024-36557
Medium (6.6). EPSS 0.2% chance of exploitation in the next 30 days.
The device ID is based on IMEI in Forever KidsWatch Call Me KW50 R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h and Forever KidsWatch Call Me 2 KW60 R36CW_YDE_S4_A29_2_V1.0_2023.05.24_22.49.44_cob_b. If a malicious user changes the IMEI to the IMEI of a unit they registered in the mobile app, it is possible to hijack the device and control it from the app.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 9% of CVEs (scores of 2026-10-31)
- CWE
- CWE-290
- Published
- Modified
- Record from
- the NVD, synced