CVE-2019-3998LOW
Description
Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.4 allows a local, unauthenticated attacker to modify the Wi-Fi network the base station connects to.
References
Details
Source: MITRE
Published: 2020-02-13
Updated: 2020-02-25
Type: CWE-287
Risk Information
CVSS v2.0
Base Score: 1.9
Vector: AV:L/AC:M/Au:N/C:N/I:P/A:N
Impact Score: 2.9
Exploitability Score: 3.4
Severity: LOW
CVSS v3.0
Base Score: 5.5
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Impact Score: 3.6
Exploitability Score: 1.8
Severity: MEDIUM
Vulnerable Software
Configuration 1
AND
OR
cpe:2.3:o:simplisafe:simplisafe_ss3_firmware:1.4:*:*:*:*:*:*:*
OR