Approved changes feed: RSS · Atom

cpe:2.3:h:geniecompany:aladdin_connect_garage_door_opener:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorGeniecompany (38536043-3595-559c-b5d0-a9c56d84bcf1)
ProductAladdin Connect Garage Door Opener (215911b6-7171-5b62-beab-8bbe0297aebc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-5881 not_vulnerable 2026-06-08 06:19:45.023574 Unauthenticated access permitted to web interface page "Garage Door Control Module Setup"
Unauthenticated access permitted to web interface page The Genie Company Aladdin Connect (Retrofit-Kit Model ALDCM) "Garage Door Control Module Setup" and modify the Garage door's SSID settings.
Published: 2024-01-03T19:22:08.506Z
Updated: 2024-09-05T20:52:05.695Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5880 not_vulnerable 2026-06-08 06:19:45.019975 Cross-site Scripting (XSS) injected into Aladdin Connect garage door opener (Retrofit-Kit) configuration setup webserver console via broadcast SSID name
When the Genie Company Aladdin Connect garage door opener (Retrofit-Kit Model ALDCM) is placed into configuration mode the web servers “Garage Door Control Module Setup” page is vulnerable to XSS via a broadcast SSID name containing malicious code with client side Java Script and/or HTML. This allows the attacker to inject malicious code with client side Java Script and/or HTML into the users' web browser. 
Published: 2024-01-03T19:16:44.618Z
Updated: 2024-08-27T15:30:42.784Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.