CVE-2017-16867 Amazon Key through 2017-11-16 mishandles Cloud Cam 802.11 deauthentication frames during the delivery process, which makes it easier for (1) delivery drivers to freeze a camera and re-enter a house fo...
MediumCVSS 6.5
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Amazon Key through 2017-11-16 mishandles Cloud Cam 802.11 deauthentication frames during the delivery process, which makes it easier for (1) delivery drivers to freeze a camera and re-enter a house for unfilmed activities or (2) attackers to freeze a camera and enter a house if a delivery driver failed to ensure a locked door before leaving.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| amazon key firmware | <= 2017-11-16 | No fix listed |
References
- 101899 third-party-advisory vdb-entry
- www.engadget.com issue-tracking third-party-advisory
- www.theverge.com issue-tracking third-party-advisory
- www.wired.com issue-tracking third-party-advisory