CVE-2024-36555

Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Built-in SMS-configuration command in Forever KidsWatch Call Me KW50 R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h and Forever KidsWatch Call Me 2 KW-60 R36CW_YDE_S4_A29_2_V1.0_2023.05.24_22.49.44_cob_b allows malicious users to change the device IMEI-number which allows for forging the identity of the device.

Published 2025-02-06. Last modified 2026-06-17.