Amazon Key Vulnerability: Exploiting Cloud Cam 802.11 Deauthentication Frames for Unauthorized Access

CVE-2017-16867 · LOW Severity

AV:A/AC:L/AU:N/C:N/I:N/A:P

Amazon Key through 2017-11-16 mishandles Cloud Cam 802.11 deauthentication frames during the delivery process, which makes it easier for (1) delivery drivers to freeze a camera and re-enter a house for unfilmed activities or (2) attackers to freeze a camera and enter a house if a delivery driver failed to ensure a locked door before leaving.

Learn more about our Cloud Audit.