Unauthenticated access permitted to web interface page The Genie Company Aladdin Connect (Retrofit-Kit Model ALDCM) "Garage Door Control Module Setup" and modify the Garage door's SSID settings.
References
| Link | Resource |
|---|---|
| https://www.rapid7.com/blog/post/2024/01/03/genie-aladdin-connect-retrofit-garage-door-opener-multiple-vulnerabilities/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
10 Jan 2024, 20:26
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Geniecompany
Geniecompany aladdin Connect Garage Door Opener Firmware Geniecompany aladdin Connect Garage Door Opener |
|
| References | () https://www.rapid7.com/blog/post/2024/01/03/genie-aladdin-connect-retrofit-garage-door-opener-multiple-vulnerabilities/ - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.2 |
| CPE | cpe:2.3:o:geniecompany:aladdin_connect_garage_door_opener_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:geniecompany:aladdin_connect_garage_door_opener:-:*:*:*:*:*:*:* |
Information
Published : 2024-01-03 20:15
Updated : 2024-01-10 20:26
NVD link : CVE-2023-5881
Mitre link : CVE-2023-5881
CVE.ORG link : CVE-2023-5881
JSON object : View
Products Affected
geniecompany
- aladdin_connect_garage_door_opener_firmware
- aladdin_connect_garage_door_opener
CWE
CWE-306
Missing Authentication for Critical Function