PatchTheCVE: simplisafehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2020-5727: Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.4 allows a local, unauthhttps://patchthecve.com/cve/CVE-2020-5727.htmlhttps://patchthecve.com/cve/CVE-2020-5727.htmlWed, 17 Jun 2026 03:22:07 +0000MEDIUM 4.6: Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.4 allows a local, unauthenticated attacker to pair a rogue keypad to an armed system.CVE-2019-3998: Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.4 allows a local, unauthhttps://patchthecve.com/cve/CVE-2019-3998.htmlhttps://patchthecve.com/cve/CVE-2019-3998.htmlWed, 17 Jun 2026 02:36:01 +0000MEDIUM 5.5: Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.4 allows a local, unauthenticated attacker to modify the Wi-Fi network the base station connects to.CVE-2019-3997: Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.0-1.3 allows a local, unhttps://patchthecve.com/cve/CVE-2019-3997.htmlhttps://patchthecve.com/cve/CVE-2019-3997.htmlWed, 17 Jun 2026 02:36:01 +0000MEDIUM 4.6: Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.0-1.3 allows a local, unauthenticated attacker to pair a rogue keypad to an armed system.CVE-2018-11402: SimpliSafe Original has Unencrypted Keypad Transmissions, which allows physically proximate attackers to discohttps://patchthecve.com/cve/CVE-2018-11402.htmlhttps://patchthecve.com/cve/CVE-2018-11402.htmlWed, 17 Jun 2026 01:35:51 +0000MEDIUM 6.6: SimpliSafe Original has Unencrypted Keypad Transmissions, which allows physically proximate attackers to discover the PIN.CVE-2018-11401: In SimpliSafe Original, RF Interference (e.g., an extremely strong 433.92 MHz signal) by a physically proximathttps://patchthecve.com/cve/CVE-2018-11401.htmlhttps://patchthecve.com/cve/CVE-2018-11401.htmlWed, 17 Jun 2026 01:35:51 +0000MEDIUM 4.6: In SimpliSafe Original, RF Interference (e.g., an extremely strong 433.92 MHz signal) by a physically proximate attacker does not cause a notification.CVE-2018-11400: In SimpliSafe Original, the Base Station fails to detect tamper attempts: it does not send a notification if ahttps://patchthecve.com/cve/CVE-2018-11400.htmlhttps://patchthecve.com/cve/CVE-2018-11400.htmlWed, 17 Jun 2026 01:35:51 +0000MEDIUM 4.6: In SimpliSafe Original, the Base Station fails to detect tamper attempts: it does not send a notification if a physically proximate attacker removes the battery and external power.CVE-2018-11399: SimpliSafe Original has Unencrypted Sensor Transmissions, which allows physically proximate attackers to obtaihttps://patchthecve.com/cve/CVE-2018-11399.htmlhttps://patchthecve.com/cve/CVE-2018-11399.htmlWed, 17 Jun 2026 01:35:51 +0000MEDIUM 4.3: SimpliSafe Original has Unencrypted Sensor Transmissions, which allows physically proximate attackers to obtain potentially sensitive information about the specific times when alarm-system events occur.