← Back

Simplisafe

simplisafe

7 CVEs • 16 products

Products (16)

Click to collapse
Toggle
U9k Bs1000 Firmware
u9k-bs1000_firmware
2 CVEs
Ss3 Firmware
ss3_firmware
2 CVEs
U9k Es1000 Firmware
u9k-es1000_firmware
1 CVE
U9k Kr1 Firmware
u9k-kr1_firmware
1 CVE
U9k Ms1000 Firmware
u9k-ms1000_firmware
1 CVE
U9k Wt1000 Firmware
u9k-wt1000_firmware
1 CVE
U9k Kp1000 Firmware
u9k-kp1000_firmware
1 CVE
Simplisafe Ss3 Firmware
simplisafe_ss3_firmware
1 CVE
U9k Es1000
u9k-es1000
0 CVEs
U9k Kr1
u9k-kr1
0 CVEs
U9k Ms1000
u9k-ms1000
0 CVEs
U9k Wt1000
u9k-wt1000
0 CVEs
U9k Bs1000
u9k-bs1000
0 CVEs
U9k Kp1000
u9k-kp1000
0 CVEs
Ss3
ss3
0 CVEs
Simplisafe Ss3
simplisafe_ss3
0 CVEs

CVEs (7)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-5727
1Simplisafe
1Ss3 Firmware
Jun 17, 2026
May 2, 2020
N/A· v4
4.6 MEDIUM· v3
2.1 LOW· v2
Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.4 allows a local, unauthenticated attacker to pair a rogue keypad to an armed system.
CVE-2019-3998
1Simplisafe
1Simplisafe Ss3 Firmware
Jun 17, 2026
Feb 13, 2020
N/A· v4
5.5 MEDIUM· v3
1.9 LOW· v2
Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.4 allows a local, unauthenticated attacker to modify the Wi-Fi network the base station connects to.
CVE-2019-3997
1Simplisafe
1Ss3 Firmware
Jun 17, 2026
Jan 16, 2020
N/A· v4
4.6 MEDIUM· v3
2.1 LOW· v2
Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.0-1.3 allows a local, unauthenticated attacker to pair a rogue keypad to an armed system.
CVE-2018-11402
1Simplisafe
1U9k Kp1000 Firmware
Nov 21, 2024
May 24, 2018
N/A· v4
6.6 MEDIUM· v3
1.9 LOW· v2
SimpliSafe Original has Unencrypted Keypad Transmissions, which allows physically proximate attackers to discover the PIN.
CVE-2018-11401
1Simplisafe
1U9k Bs1000 Firmware
Nov 21, 2024
May 24, 2018
N/A· v4
4.6 MEDIUM· v3
4.9 MEDIUM· v2
In SimpliSafe Original, RF Interference (e.g., an extremely strong 433.92 MHz signal) by a physically proximate attacker does not cause a notification.
CVE-2018-11400
1Simplisafe
1U9k Bs1000 Firmware
Nov 21, 2024
May 24, 2018
N/A· v4
4.6 MEDIUM· v3
4.9 MEDIUM· v2
In SimpliSafe Original, the Base Station fails to detect tamper attempts: it does not send a notification if a physically proximate attacker removes the battery and external power.
CVE-2018-11399
1Simplisafe
4U9k Es1000 Firmware
U9k Kr1 FirmwareU9k Ms1000 Firmware+1 more
Nov 21, 2024
May 24, 2018
N/A· v4
4.3 MEDIUM· v3
1.9 LOW· v2
SimpliSafe Original has Unencrypted Sensor Transmissions, which allows physically proximate attackers to obtain potentially sensitive information about the specific times when alarm-system events occur.