Code injection

SimpliSafe Original has Unencrypted Keypad Transmissions, which allows physically proximate attackers to discover the PIN...

Design/Logic Flaw

In SimpliSafe Original, RF Interference e.g., an extremely strong 433.92 MHz signal by a physically proximate attacker does not cause a notification...

CVE-2018-11399

SimpliSafe Original has Unencrypted Sensor Transmissions, which allows physically proximate attackers to obtain potentially sensitive information about the specific times when alarm-system events occur...

CVE-2018-11401

In SimpliSafe Original, RF Interference e.g., an extremely strong 433.92 MHz signal by a physically proximate attacker does not cause a notification...

CVE-2018-11402

SimpliSafe Original has Unencrypted Keypad Transmissions, which allows physically proximate attackers to discover the PIN...

CVE-2018-11401

CVE-2018-11401 concerns SimpliSafe Original. The issue, described in the NVD entry, is that RF interference from a physically proximate attacker (e.g., a strong 433.92 MHz signal) does not trigger a notification. The CVSSv3.0 vector (AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) yields a base score of 4.6...

CVE-2018-11400

In SimpliSafe Original, the Base Station fails to detect tamper attempts: it does not send a notification if a physically proximate attacker removes the battery and external power...

CVE-2018-11399

CVE-2018-11399 affects SimpliSafe Original: sensors transmit data unencrypted, enabling physically proximate attackers to infer when alarm events occur. Root cause: lack of encryption in sensor transmissions. Impact: potential disclosure of timing of events; confidentiality partially affected. Ex...

CVE-2018-11400

CVE-2018-11400 affects SimpliSafe Original Base Station. The vulnerability is a tamper-detection failure: when a physically proximate attacker removes the battery and external power, the Base Station does not send a tamper notification. Documented impact from NVD: availability impact is High, wit...

CVE-2018-11402

Summary : CVE-2018-11402 pertains to SimpliSafe Original, where keypad transmissions were unencrypted, enabling a physically proximate attacker to discover the PIN. The connected CNVD entry explicitly notes that the vulnerability stems from a lack of encryption, allowing local access to the PIN. ...

CVE-2018-11402: Cleartext Transmission of Sensitive Information

SimpliSafe Original has Unencrypted Keypad Transmissions, which allows physically proximate attackers to discover the PIN...

CVE-2018-11400: Undefined Security Weakness

In SimpliSafe Original, the Base Station fails to detect tamper attempts: it does not send a notification if a physically proximate attacker removes the battery and external power...

CVE-2018-11401: Undefined Security Weakness

In SimpliSafe Original, RF Interference e.g., an extremely strong 433.92 MHz signal by a physically proximate attacker does not cause a notification...

CVE-2018-11399: Cleartext Transmission of Sensitive Information

SimpliSafe Original has Unencrypted Sensor Transmissions, which allows physically proximate attackers to obtain potentially sensitive information about the specific times when alarm-system events occur...

PT-2018-10545

Name of the Vulnerable Software and Affected Versions SimpliSafe Original affected versions not specified Description The issue concerns a failure of the Base Station in SimpliSafe Original to detect tamper attempts. Specifically, it does not send a notification if an attacker, who is physically...

Hack Disarms SimpliSafe's Home Wireless Security Systems

More than a quarter million homes protected by SimpliSafe wireless security systems are vulnerable to hackers who can deactivate the alarm anytime, according to IOActive, a Seattle-based security consulting firm. IOActive published a proof of concept report on Wednesday that outlines how it...

Using SimpliSafe Home Security? — You're Screwed! It's Easy to Hack & Can't be Patched

If you are using a SimpliSafe wireless home alarm system to improve your home security smartly, just throw it up and buy a new one. It is useless. The so-called 'Smart' Technology, which is designed to make your Home Safer, is actually opening your house doors for hackers. The latest in this fiel...