Aladdin Connect (Retrofit-Kit) vulnerabilities

2 known vulnerabilities in Aladdin Connect (Retrofit-Kit) from The Genie Company. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  Aladdin Connect (Retrofit-Kit): Missing Authentication for Critical Functionality

  CVE-2023-5881Jan 3, 2024The Genie Company

  Unauthenticated access permitted to web interface page The Genie Company Aladdin Connect (Retrofit-Kit Model ALDCM) "Garage Door Control Module Setup" and modify the Garage door's SSID settings.

• 8.8 High severity

  Aladdin Connect (Retrofit-Kit): Improper Neutralization of Input During Web Page Generation

  CVE-2023-5880Jan 3, 2024The Genie Company

  When the Genie Company Aladdin Connect garage door opener (Retrofit-Kit Model ALDCM) is placed into configuration mode the web servers “Garage Door Control Module Setup” page is vulnerable to XSS via a broadcast SSID name containing malicious code with client