CVE-2023-5881
Assigner: rapid7
Published: 2024-01-03T19:22:08.506Z
State: PUBLISHED
affected: defaultStatus: unaffected
platforms: RTOS
product: Aladdin Connect (Retrofit-Kit)
vendor: The Genie Company
versions: lessThanOrEqual: <=14.1.1
status: affected
version: 0
versionType: semver
descriptions: supportingMedia: base64: no
type: text/html
value: <p><b>Unauthenticated access permitted to web interface page The Genie Company Aladdin Connect (Retrofit-Kit Model ALDCM) "Garage Door Control Module Setup" and modify the Garage door's SSID settings. <br></b><b><br></b></p>
value: Unauthenticated access permitted to web interface page The Genie Company Aladdin Connect (Retrofit-Kit Model ALDCM) "Garage Door Control Module Setup" and modify the Garage door's SSID settings. 




impacts: capecId: CAPEC-114
descriptions: value: CAPEC-114 Authentication Abuse
problemTypes: descriptions: cweId: CWE-306
description: CWE-306 Missing Authentication for Critical Function
type: CWE
source: discovery: UNKNOWN
title: Unauthenticated access permitted to web interface page "Garage Door Control Module Setup"
x_generator: engine: Vulnogram 0.1.0-dev