CVE-2019-3997

Name of the Vulnerable Software and Affected Versions SimpliSafe SS3 firmware versions 1.0 through 1.3

Description The issue allows a local, unauthenticated attacker to bypass authentication using an alternate path or channel, enabling them to pair a rogue keypad to an armed system.

Recommendations For SimpliSafe SS3 firmware versions 1.0 through 1.3, consider restricting access to the keypad pairing functionality until a patch is available. As a temporary workaround, monitor system activity closely for any signs of unauthorized keypad pairing. At the moment, there is no information about a newer version that contains a fix for this vulnerability.