CVE-2020-5727

CVE-2020-5727 affects SimpliSafe SS3 with firmware version 1.4. The issue is an authentication bypass via an alternate path/channel that lets a local, unauthenticated attacker pair a rogue keypad to an armed system. The publicly available documents confirm the vulnerability details but do not pro...

CVE-2020-5727: Improper Authentication

Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.4 allows a local, unauthenticated attacker to pair a rogue keypad to an armed system...

PT-2020-18650

Name of the Vulnerable Software and Affected Versions SimpliSafe SS3 firmware version 1.4 Description The issue allows a local, unauthenticated attacker to bypass authentication using an alternate path or channel, enabling them to pair a rogue keypad to an armed system. Recommendations For...

PT-2020-10926

Name of the Vulnerable Software and Affected Versions SimpliSafe SS3 firmware versions 1.0 through 1.3 Description The issue allows a local, unauthenticated attacker to bypass authentication using an alternate path or channel, enabling them to pair a rogue keypad to an armed system. Recommendatio...