Code injection

SimpliSafe Original has Unencrypted Sensor Transmissions, which allows physically proximate attackers to obtain potentially sensitive information about the specific times when alarm-system events occur...

Xxe

In SimpliSafe Original, the Base Station fails to detect tamper attempts: it does not send a notification if a physically proximate attacker removes the battery and external power...

Design/Logic Flaw

In SimpliSafe Original, RF Interference e.g., an extremely strong 433.92 MHz signal by a physically proximate attacker does not cause a notification...

Code injection

SimpliSafe Original has Unencrypted Keypad Transmissions, which allows physically proximate attackers to discover the PIN...

CVE-2018-11399

SimpliSafe Original has Unencrypted Sensor Transmissions, which allows physically proximate attackers to obtain potentially sensitive information about the specific times when alarm-system events occur...

CVE-2018-11401

In SimpliSafe Original, RF Interference e.g., an extremely strong 433.92 MHz signal by a physically proximate attacker does not cause a notification...

CVE-2018-11402

SimpliSafe Original has Unencrypted Keypad Transmissions, which allows physically proximate attackers to discover the PIN...

CVE-2018-11400

In SimpliSafe Original, the Base Station fails to detect tamper attempts: it does not send a notification if a physically proximate attacker removes the battery and external power...

CVE-2018-11399

CVE-2018-11399 affects SimpliSafe Original: sensors transmit data unencrypted, enabling physically proximate attackers to infer when alarm events occur. Root cause: lack of encryption in sensor transmissions. Impact: potential disclosure of timing of events; confidentiality partially affected. Ex...

CVE-2018-11400

CVE-2018-11400 affects SimpliSafe Original Base Station. The vulnerability is a tamper-detection failure: when a physically proximate attacker removes the battery and external power, the Base Station does not send a tamper notification. Documented impact from NVD: availability impact is High, wit...

CVE-2018-11401

CVE-2018-11401 concerns SimpliSafe Original. The issue, described in the NVD entry, is that RF interference from a physically proximate attacker (e.g., a strong 433.92 MHz signal) does not trigger a notification. The CVSSv3.0 vector (AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) yields a base score of 4.6...

CVE-2018-11402

Summary : CVE-2018-11402 pertains to SimpliSafe Original, where keypad transmissions were unencrypted, enabling a physically proximate attacker to discover the PIN. The connected CNVD entry explicitly notes that the vulnerability stems from a lack of encryption, allowing local access to the PIN. ...

CVE-2018-11399

SimpliSafe Original has Unencrypted Sensor Transmissions, which allows physically proximate attackers to obtain potentially sensitive information about the specific times when alarm-system events occur...

CVE-2018-11402

SimpliSafe Original has Unencrypted Keypad Transmissions, which allows physically proximate attackers to discover the PIN...

CVE-2018-11400

In SimpliSafe Original, the Base Station fails to detect tamper attempts: it does not send a notification if a physically proximate attacker removes the battery and external power...

CVE-2018-11402: Cleartext Transmission of Sensitive Information

SimpliSafe Original has Unencrypted Keypad Transmissions, which allows physically proximate attackers to discover the PIN...

PT-2018-10544

Name of the Vulnerable Software and Affected Versions SimpliSafe Original affected versions not specified Description The issue allows physically proximate attackers to obtain potentially sensitive information about the specific times when alarm-system events occur due to unencrypted sensor...

CVE-2018-11399: Cleartext Transmission of Sensitive Information

SimpliSafe Original has Unencrypted Sensor Transmissions, which allows physically proximate attackers to obtain potentially sensitive information about the specific times when alarm-system events occur...

PT-2018-10545

Name of the Vulnerable Software and Affected Versions SimpliSafe Original affected versions not specified Description The issue concerns a failure of the Base Station in SimpliSafe Original to detect tamper attempts. Specifically, it does not send a notification if an attacker, who is physically...

PT-2018-10546

Name of the Vulnerable Software and Affected Versions SimpliSafe Original affected versions not specified Description The issue concerns RF Interference, where a strong 433.92 MHz signal from a physically proximate attacker does not trigger a notification. Recommendations At the moment, there is ...