Approved changes feed: RSS · Atom

cpe:2.3:o:geniecompany:aladdin_connect_garage_door_opener_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorGeniecompany (38536043-3595-559c-b5d0-a9c56d84bcf1)
ProductAladdin Connect Garage Door Opener Firmware (94baa1f9-49b1-5edc-ba9c-d2b8b9837003)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-5881 vulnerable 2026-06-08 06:19:45.023445 Unauthenticated access permitted to web interface page "Garage Door Control Module Setup"
Unauthenticated access permitted to web interface page The Genie Company Aladdin Connect (Retrofit-Kit Model ALDCM) "Garage Door Control Module Setup" and modify the Garage door's SSID settings.
Published: 2024-01-03T19:22:08.506Z
Updated: 2024-09-05T20:52:05.695Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5880 vulnerable 2026-06-08 06:19:45.019218 Cross-site Scripting (XSS) injected into Aladdin Connect garage door opener (Retrofit-Kit) configuration setup webserver console via broadcast SSID name
When the Genie Company Aladdin Connect garage door opener (Retrofit-Kit Model ALDCM) is placed into configuration mode the web servers “Garage Door Control Module Setup” page is vulnerable to XSS via a broadcast SSID name containing malicious code with client side Java Script and/or HTML. This allows the attacker to inject malicious code with client side Java Script and/or HTML into the users' web browser. 
Published: 2024-01-03T19:16:44.618Z
Updated: 2024-08-27T15:30:42.784Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.