Vulnerabilities > Simplisafe > SS3 Firmware

DATE CVE VULNERABILITY TITLE RISK
2020-05-02 CVE-2020-5727 Improper Authentication vulnerability in Simplisafe SS3 Firmware 1.0/1.3
Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.4 allows a local, unauthenticated attacker to pair a rogue keypad to an armed system.
local
low complexity
simplisafe CWE-287
2.1
2020-01-16 CVE-2019-3997 Improper Authentication vulnerability in Simplisafe SS3 Firmware 1.0/1.3
Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.0-1.3 allows a local, unauthenticated attacker to pair a rogue keypad to an armed system.
local
low complexity
simplisafe CWE-287
2.1