Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2020-5727

14
FAUCET Score

CVE-2020-5727 describes an authentication bypass vulnerability in SimpliSafe SS3 firmware version 1.4. This flaw allows a local, unauthenticated attacker to pair a rogue keypad to an armed SimpliSafe SS3 system. With a CVSS score of 4.6 (Medium), the attack requires physical proximity (AV:P) but is low complexity (AC:L) and requires no user interaction (UI:N), potentially leading to high integrity impact (I:H) by compromising the system's armed state. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.

Impacted Technologies

VendorProductVersion(s)CPE
< 1.6CPE matchmatch criteria
cpe:2.3:o:simplisafe:ss3_firmware:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

4.6MEDIUM

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
Exploitability Score
0.9
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.39%
Probability of exploitation in next 30 days
EPSS Percentile
31.5%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0039 is in the 66th percentile among its peer group of 1,531 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (6)

boschvendor investigatingvia llm_extracted
maxkbvendor investigatingvia llm_extracted
nxpvendor investigatingvia llm_extracted
openfirevendor investigatingvia llm_extracted
openstackvendor investigatingvia llm_extracted
opnsensevendor investigatingvia llm_extracted

Vendor Advisories (6)

maxkbllm-maxkb-94cc3ad61593cc3cLOW

SimpliSafe SS3 PIN Add Using Rogue Keypad

May 1, 2020
openstackllm-openstack-6d07d89540c0c51bLOW

SimpliSafe SS3 PIN Add Using Rogue Keypad

May 1, 2020
nxpllm-nxp-ca9062db7631e917LOW

SimpliSafe SS3 PIN Add Using Rogue Keypad

May 1, 2020
boschllm-bosch-08043786a0967d83LOW

SimpliSafe SS3 PIN Add Using Rogue Keypad

May 1, 2020
opnsensellm-opnsense-79cbf81d42104e61LOW

SimpliSafe SS3 PIN Add Using Rogue Keypad

May 1, 2020
openfirellm-openfire-529c6c5ff61fbea7LOW

SimpliSafe SS3 PIN Add Using Rogue Keypad

May 1, 2020

References

tenable.com / security/research/tra-2020-29
ExploitThird Party Advisory