CVE-2019-20470

CVE-2019-20470 affects TK-Star Q90 Junior GPS watches, allowing an attacker to initiate an outbound call from the device to any phone number. This is achieved by sending a specially crafted SMS command, including a default or known password, to the watch. The vulnerability has a CVSS score of 7.5 (High), indicating a network-based attack with low complexity and no user interaction required, potentially leading to unauthorized voice communication. While the EPSS and FAUCET scores suggest a moderate risk, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.