CVE-2023-5881 Unauthenticated access permitted to web interface page "Garage Door Control Module Setup"

2024-01-0319:22:08

CWE-306

rapid7

github.com

cve-2023-5881

web interface

genie company aladdin connect

retrofit-kit model aldcm

garage door

ssid settings

AI Score

6.9

Confidence

Low

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

Unauthenticated access permitted to web interface page The Genie Company Aladdin Connect (Retrofit-Kit Model ALDCM) “Garage Door Control Module Setup” and modify the Garage door’s SSID settings.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:geniecompany:aladdin_connect_garage_door_opener:*:*:*:*:*:*:*:*"
    ],
    "vendor": "geniecompany",
    "product": "aladdin_connect_garage_door_opener",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "14.1.1"
      }
    ],
    "defaultStatus": "unknown"
  }
]