PatchTheCVEsimplisafe vulnerabilities
Recent CVEs affecting simplisafe products. 7 tracked.
simplisafe has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2020-05-02. Highest priority: CVE-2019-3998 (score 32/100).
- CVE-2020-5727 MEDIUM 4.6 UPGRADE Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.4 allows a local, unauth
- CVE-2019-3998 MEDIUM 5.5 MITIGATE Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.4 allows a local, unauth
- CVE-2019-3997 MEDIUM 4.6 UPGRADE Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.0-1.3 allows a local, un
- CVE-2018-11402 MEDIUM 6.6 MITIGATE SimpliSafe Original has Unencrypted Keypad Transmissions, which allows physically proximate attackers to disco
- CVE-2018-11401 MEDIUM 4.6 MITIGATE In SimpliSafe Original, RF Interference (e.g., an extremely strong 433.92 MHz signal) by a physically proximat
- CVE-2018-11400 MEDIUM 4.6 MITIGATE In SimpliSafe Original, the Base Station fails to detect tamper attempts: it does not send a notification if a
- CVE-2018-11399 MEDIUM 4.3 MITIGATE MITIGATE SimpliSafe Original has Unencrypted Sensor Transmissions, which allows physically proximate attackers to obtai
FAQ
How do I fix simplisafe vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is simplisafe being exploited right now?
None of the tracked simplisafe CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which simplisafe CVE should I patch first?
CVE-2019-3998 currently ranks highest (32/100): Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.4 allows a local, unauth.