CVE-2023-5881 — Unauthenticated access permitted to web interface page "Garage Door Control Module Setup"

CVE-2023-5881

Unauthenticated access permitted to web interface page "Garage Door Control Module Setup" PUBLISHED

Description (CNA)

Unauthenticated access permitted to web interface page The Genie Company Aladdin Connect (Retrofit-Kit Model ALDCM) "Garage Door Control Module Setup" and modify the Garage door's SSID settings.

Affected (CNA)

Vendor / product	Versions
The Genie Company / Aladdin Connect (Retrofit-Kit)	affected 0 through <=14.1.1

CWE

CWE-306

References

https://www.rapid7.com/blog/post/2024/01/03/genie-aladdin-connect-retrofit-garage-door-opener-multiple-vulnerabilities/

ADP enrichment

CVE

No English description supplied.

https://www.rapid7.com/blog/post/2024/01/03/genie-aladdin-connect-retrofit-garage-door-opener-multiple-vulnerabilities/

CISA-ADP

No English description supplied.

No references supplied.