CVE-2021-44480: Wokkalokka Wokka Watch q50 Firmware

High severity, CVSS 8.1. EPSS: 1.1% chance of exploitation in the next 30 days.

Wokka Lokka Q50 devices through 2021-11-30 allow remote attackers (who know the SIM phone number and password) to listen to a device's surroundings via a callback in an SMS command, as demonstrated by the 123456 and 523681 default passwords.

Affected products

• Wokkalokka Wokka Watch q50 Firmware: affected versions not specified

Published 2021-12-01. Last modified 2026-06-17.