——————————————<\/p>\n[VulnerabilityType Other]recommendation to disable common security measures<\/p>\n
——————————————<\/p>\n[Vendor of Product]TK-star<\/p>\n
——————————————<\/p>\n[Affected Product Code Base]TK-Star Q90 Junior GPS horloge – 3.1042.9.8656<\/p>\n
——————————————<\/p>\n[Affected Component]Sim card & PIN<\/p>\n
——————————————<\/p>\n[Attack Vectors]Local<\/p>\n
——————————————<\/p>\n[Has vendor confirmed or acknowledged the vulnerability?]true<\/p>\n
——————————————<\/p>\n[Discoverer]Dennis van Warmerdam, Jasper Nota, Jim Blankendaal<\/p>\n
——————————————<\/p>\n[Reference]https:\/\/www.tk-star.com<\/p>\n
Use CVE-2019-20473.<\/p>\n
With kind regards \/ Met vriendelijke groet,
Willem Westerhof | Senior Security Specialist & Public speaker
[Logo, company name Description automatically generated]Raising Your Cyber Resilience
E: willem.westerhof@secura.com<mailto:willem.westerhof@secura.com>
T: +31 6 488 594 22
W: secura.com<https:\/\/www.secura.com\/><\/p>\n
Follow us on:
[signature_192587247]<https:\/\/www.linkedin.com\/company\/securabv\/> [signature_493676802] <https:\/\/twitter.com\/SecuraBV> [signature_235860830] <https:\/\/www.youtube.com\/c\/SecuraBV>
[signature_4021970036]<https:\/\/www.secura.com\/><\/p>\n","protected":false},"excerpt":{"rendered":"
[Suggested description]An issue was discovered on TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices.Any SIM card used with the devicecannot have a PIN configured. If a PIN is configured, the device simply produces a“Remove PIN and restart!” message, and cannot be used. This makes it easier foran attacker to use the SIM card by stealing the …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-58535","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/58535","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=58535"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/58535\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=58535"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=58535"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=58535"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}