Vulnerabilities > CVE-2017-16867 - Unspecified vulnerability in Amazon KEY Firmware 20171116

047910
CVSS 6.5 - MEDIUM
Attack vector
ADJACENT_NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
low complexity
amazon
NVD
Published: 2017-11-16
Updated: 2024-11-21

Summary

Amazon Key through 2017-11-16 mishandles Cloud Cam 802.11 deauthentication frames during the delivery process, which makes it easier for (1) delivery drivers to freeze a camera and re-enter a house for unfilmed activities or (2) attackers to freeze a camera and enter a house if a delivery driver failed to ensure a locked door before leaving.

Vulnerable Configurations

Part Description Count
OS
Amazon
1
Hardware
Amazon
1

References