Geniecompany vulnerabilities
We track 2 vulnerabilities in Geniecompany products across 3 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 3, 2024.
2vulnerabilities
0critical
2high
0exploited
8.5average CVSS score
Latest Geniecompany vulnerabilities
- 8.2 High severity
Aladdin Connect (Retrofit-Kit): Missing Authentication for Critical Functionality
Unauthenticated access permitted to web interface page The Genie Company Aladdin Connect (Retrofit-Kit Model ALDCM) "Garage Door Control Module Setup" and modify the Garage door's SSID settings.
- 8.8 High severity
Aladdin Connect (Retrofit-Kit): Improper Neutralization of Input During Web Page Generation
When the Genie Company Aladdin Connect garage door opener (Retrofit-Kit Model ALDCM) is placed into configuration mode the web servers “Garage Door Control Module Setup” page is vulnerable to XSS via a broadcast SSID name containing malicious code with client