medium4.6
CVE-2019-3997
Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.0-1.3 allows a local, unauthenticated attacker to pair a rogue keypad to …
Impact
Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.0-1.3 allows a local, unauthenticated attacker to pair a rogue keypad to an armed system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Simplisafe | Ss3 Firmware | from 1.0 through 1.3 |