Authentication flaw

2020-01-1623:15:00

PRIOn knowledge base

www.prio-n.com

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.2%

JSON

Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.0-1.3 allows a local, unauthenticated attacker to pair a rogue keypad to an armed system.

CPENameOperatorVersion
ss3_firmwarege1.0
ss3_firmwarele1.3

CPE	Name	Operator	Version
	ss3_firmware	ge	1.0
	ss3_firmware	le	1.3

References

www.tenable.com/security/research/tra-2020-03