Unauthenticated access permitted to web interface page The Genie Company Aladdin Connect (Retrofit-Kit Model ALDCM) "Garage Door Control Module Setup" and modify the Garage door's SSID settings.
References
Link | Resource |
---|---|
https://www.rapid7.com/blog/post/2024/01/03/genie-aladdin-connect-retrofit-garage-door-opener-multiple-vulnerabilities/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
10 Jan 2024, 20:26
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
|
CPE | cpe:2.3:o:geniecompany:aladdin_connect_garage_door_opener_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:geniecompany:aladdin_connect_garage_door_opener:-:*:*:*:*:*:*:* |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.2 |
References | () https://www.rapid7.com/blog/post/2024/01/03/genie-aladdin-connect-retrofit-garage-door-opener-multiple-vulnerabilities/ - Vendor Advisory | |
First Time |
Geniecompany
Geniecompany aladdin Connect Garage Door Opener Firmware Geniecompany aladdin Connect Garage Door Opener |
03 Jan 2024, 20:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-01-03 20:15
Updated : 2024-01-10 20:26
NVD link : CVE-2023-5881
Mitre link : CVE-2023-5881
CVE.ORG link : CVE-2023-5881
JSON object : View
Products Affected
geniecompany
- aladdin_connect_garage_door_opener
- aladdin_connect_garage_door_opener_firmware
CWE
CWE-306
Missing Authentication for Critical Function