CVE-2021-44480

Name of the Vulnerable Software and Affected Versions: Wokka Lokka Q50 devices through 2021-11-30

Description: The issue allows remote attackers who know the SIM phone number and password to listen to a device's surroundings via a callback in an SMS command. This is possible due to default passwords such as 123456 and 523681.

Recommendations: For Wokka Lokka Q50 devices through 2021-11-30, change the default passwords 123456 and 523681 to secure ones to prevent unauthorized access. As a temporary workaround, consider restricting access to SMS commands until a more secure configuration can be implemented.