CVE-2019-3997

CVE-2019-3997 describes an authentication bypass vulnerability in SimpliSafe SS3 firmware versions 1.0-1.3, allowing a local, unauthenticated attacker to pair an unauthorized keypad to an armed system. This medium-severity flaw (CVSS 4.6) requires physical proximity to the system (attack vector: physical) and has a high impact on integrity, as it could disarm the system. Despite its potential to compromise security, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.