CVE-2017-16867

Amazon Key through 2017-11-16 mishandles Cloud Cam 802.11 deauthentication frames during the delivery process, which makes it easier for (1) delivery drivers to freeze a camera and re-enter a house for unfilmed activities or (2) attackers to freeze a camera and enter a house if a delivery driver failed to ensure a locked door before leaving.

• http://www.securityfocus.com/bid/101899Third Party Advisory, VDB Entry
• https://www.engadget.com/2017/11/16/amazon-key-hack-cloud-cam/Issue Tracking, Third Party Advisory
• https://www.theverge.com/2017/11/16/16665064/amazon-key-camera-disableIssue Tracking, Third Party Advisory
• https://www.wired.com/story/amazon-key-flaw-let-deliverymen-disable-your-camera/Issue Tracking, Third Party Advisory
• http://www.securityfocus.com/bid/101899Third Party Advisory, VDB Entry
• https://www.engadget.com/2017/11/16/amazon-key-hack-cloud-cam/Issue Tracking, Third Party Advisory
• https://www.theverge.com/2017/11/16/16665064/amazon-key-camera-disableIssue Tracking, Third Party Advisory
• https://www.wired.com/story/amazon-key-flaw-let-deliverymen-disable-your-camera/Issue Tracking, Third Party Advisory

Published

Nov 16, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-16861It was possible for double OGNL evaluation in certain redire…
• CVE-2017-16862The IncomingMailServers resource in Atlassian Jira before ve…
• CVE-2017-16863The PieChart gadget in Atlassian Jira before version 7.5.3 a…
• CVE-2017-16864The issue search resource in Atlassian Jira before version 7…
• CVE-2017-16865The Trello importer in Atlassian Jira before version 7.6.1 a…
• CVE-2017-16866dayrui FineCms 5.2.0 before 2017.11.16 has Cross Site Script…
• CVE-2017-16868In SWFTools 0.9.2, the wav_convert2mono function in lib/wav.…
• CVE-2017-16869p_mach.cpp in UPX 3.94 allows remote attackers to cause a de…
• CVE-2017-16870The UpdraftPlus plugin through 1.13.12 for WordPress has SSR…
• CVE-2017-16871The UpdraftPlus plugin through 1.13.12 for WordPress allows …
• CVE-2017-16872An issue was discovered in Teluu pjproject (pjlib and pjlib-…
• CVE-2017-16873It is possible to exploit an unsanitized PATH in the suid bi…