Aladdin Connect
Approved changes feed: RSS · Atom
cpe:2.3:a:geniecompany:aladdin_connect:*:*:*:*:*:android:*:*
part: a version: * update: *
| Vendor | Geniecompany (38536043-3595-559c-b5d0-a9c56d84bcf1) |
|---|---|
| Product | Aladdin Connect (cad3b5b7-b7a9-5507-8b43-de208bc2f5bf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | android |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/shoejosh/aladdin-connect |
purl2cpe | 2026-06-01 10:18:00.566297 |
pkg:pypi/aladdin-connect |
purl2cpe | 2026-06-01 10:18:00.566299 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-5880 |
vulnerable | 2026-06-08 06:19:45.017044 |
Cross-site Scripting (XSS) injected into Aladdin Connect garage door opener (Retrofit-Kit) configuration setup webserver console via broadcast SSID name
When the Genie Company Aladdin Connect garage door opener (Retrofit-Kit Model ALDCM) is placed into configuration mode the web servers “Garage Door Control Module Setup” page is vulnerable to XSS via a broadcast SSID name containing malicious code with client side Java Script and/or HTML. This allows the attacker to inject malicious code with client side Java Script and/or HTML into the users' web browser.
Published: 2024-01-03T19:16:44.618Z
Updated: 2024-08-27T15:30:42.784Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5879 |
vulnerable | 2026-06-08 06:19:45.016547 |
Aladdin Connect Android Application Insecure Storage
Users’ product account authentication data was stored in clear text in The Genie Company Aladdin Connect Mobile Application Version 5.65 Build 2075 (and below) on Android Devices. This allows the attacker, with access to the android device, to potentially retrieve users' clear text authentication credentials.
Published: 2024-01-03T19:15:59.436Z
Updated: 2025-06-17T19:39:08.880Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.