CVE-2023-5881highCWE-306

CVE-2023-5881: high-severity vulnerability in The Genie Company Aladdin Connect (Retrofit-Kit)

Unauthenticated access permitted to web interface page "Garage Door Control Module Setup"

Published · Updated

Follow this CVE+ Monitor Aladdin Connect

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.1epss 0.6%
Unauthenticated access permitted to web interface page The Genie Company Aladdin Connect (Retrofit-Kit Model ALDCM) "Garage Door Control Module Setup" and modify the Garage door's SSID settings.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Affected products
The Genie Company · Aladdin Connect (Retrofit-Kit)
Related CVEs — The Genie Company Aladdin Connect (Retrofit-Kit)

In the same product, most dangerous first.

CVE-2023-5880HIGHCross-site Scripting (XSS) injected into Aladdin Connect garage door opener (Retrofit-Kit) configuration setup webserver console via broadcast SSID nameEPSS 0.6%