writeups.xyz / Genie Aladdin Connect Retrofit Garage Door Opener: Multiple Vulnerabilities

Submitter : c2a

Date: 3 January 2024

Bounty : undisclosed

Vulnerabilities :

• Android
• XSS
• Insecure Data Storage
• Missing Authentication
• IDOR

Programs :

• The Genie Company (Aladdin Connect)

Authors :

• Deral Heiland (@Percent_X)

Link :
https://www.rapid7.com/blog/post/2024/01/03/genie-aladdin-connect-retrofit-garage-door-opener-multiple-vulnerabilities/