The Genie Company

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

The Genie Company records in CISA KEV

No The Genie Company vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Aladdin Connect Garage Door Opener Firmware 2 records HIGH Aladdin Connect 1 record LOW

Records

3 records

TI-2023-05415 CVE-2023-5880 · GHSA-4fr6-x37h-wjwr

Cross-site scripting in Genie Company Aladdin Connect

HIGH 71

When the Genie Company Aladdin Connect garage door opener (Retrofit-Kit Model ALDCM) is placed into configuration mode the web servers “Garage Door Control Module Setup” page is vulnerable to XSS via a broadcast SSID nam…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00553 Published 2024-01-03 No fix listed CWE-79

TI-2023-05416 CVE-2023-5881 · GHSA-cjpg-8x68-w7r7

Unauthenticated access permitted to web interface page "Garage Door Control Module Setup"

HIGH 69

Unauthenticated access permitted to web interface page The Genie Company Aladdin Connect (Retrofit-Kit Model ALDCM) "Garage Door Control Module Setup" and modify the Garage door's SSID settings.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00611 Published 2024-01-03 No fix listed CWE-306

TI-2023-05414 CVE-2023-5879 · GHSA-cj4v-24xq-mcm6

Aladdin Connect Android Application Insecure Storage

LOW 30

Users’ product account authentication data was stored in clear text in The Genie Company Aladdin Connect Mobile Application Version 5.65 Build 2075 (and below) on Android Devices.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00422 Published 2024-01-03 No fix listed CWE-922

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0