EUVD-2018-3433

Malware in sbrugna...

EUVD-2018-3435

Malware in sbrugna...

EUVD-2018-3436

Malware in sbrugna...

SimpliSafe Original Information Disclosure Vulnerability (CNVD-2018-10490)

SimpliSafe Original is a home security management system. The system includes video surveillance and intrusion alarms, among other things. A security vulnerability exists in SimpliSafe Original that stems from a failure to encrypt transmissions. An attacker in close physical proximity could explo...

SimpliSafe Original Security Bypass Vulnerability

SimpliSafe Original is a home security management system. The system includes video surveillance and intrusion alarms, among other things. A security vulnerability exists in SimpliSafe Original. An attacker in close physical proximity could exploit the vulnerability to bypass security protections...

SimpliSafe Original Information Disclosure Vulnerability

SimpliSafe Original is a home security management system. The system includes video surveillance and intrusion alarms, among other things. A security vulnerability exists in SimpliSafe Original that stems from the program's failure to encrypt transmitted messages. An attacker in close physical...

CVE-2018-11399

SimpliSafe Original has Unencrypted Sensor Transmissions, which allows physically proximate attackers to obtain potentially sensitive information about the specific times when alarm-system events occur...

Code injection

SimpliSafe Original has Unencrypted Sensor Transmissions, which allows physically proximate attackers to obtain potentially sensitive information about the specific times when alarm-system events occur...

CVE-2018-11402

SimpliSafe Original has Unencrypted Keypad Transmissions, which allows physically proximate attackers to discover the PIN...

Xxe

In SimpliSafe Original, the Base Station fails to detect tamper attempts: it does not send a notification if a physically proximate attacker removes the battery and external power...

CVE-2018-11400

In SimpliSafe Original, the Base Station fails to detect tamper attempts: it does not send a notification if a physically proximate attacker removes the battery and external power...

CVE-2018-11401

In SimpliSafe Original, RF Interference e.g., an extremely strong 433.92 MHz signal by a physically proximate attacker does not cause a notification...

Code injection

SimpliSafe Original has Unencrypted Keypad Transmissions, which allows physically proximate attackers to discover the PIN...

Design/Logic Flaw

In SimpliSafe Original, RF Interference e.g., an extremely strong 433.92 MHz signal by a physically proximate attacker does not cause a notification...

CVE-2018-11401

CVE-2018-11401 concerns SimpliSafe Original. The issue, described in the NVD entry, is that RF interference from a physically proximate attacker (e.g., a strong 433.92 MHz signal) does not trigger a notification. The CVSSv3.0 vector (AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) yields a base score of 4.6...

CVE-2018-11400

CVE-2018-11400 affects SimpliSafe Original Base Station. The vulnerability is a tamper-detection failure: when a physically proximate attacker removes the battery and external power, the Base Station does not send a tamper notification. Documented impact from NVD: availability impact is High, wit...

CVE-2018-11399

SimpliSafe Original has Unencrypted Sensor Transmissions, which allows physically proximate attackers to obtain potentially sensitive information about the specific times when alarm-system events occur...

CVE-2018-11402

SimpliSafe Original has Unencrypted Keypad Transmissions, which allows physically proximate attackers to discover the PIN...

CVE-2018-11400

In SimpliSafe Original, the Base Station fails to detect tamper attempts: it does not send a notification if a physically proximate attacker removes the battery and external power...