Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2020-05-02	CVE-2020-5727	Improper Authentication vulnerability in Simplisafe SS3 Firmware 1.0/1.3 Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.4 allows a local, unauthenticated attacker to pair a rogue keypad to an armed system. low complexity simplisafe CWE-287	4.6
2020-01-16	CVE-2019-3997	Improper Authentication vulnerability in Simplisafe SS3 Firmware 1.0/1.3 Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.0-1.3 allows a local, unauthenticated attacker to pair a rogue keypad to an armed system. low complexity simplisafe CWE-287	4.6