CVE-2023-5879 - CVE House
Back to Database
Status published Unknown CVE-2023-5879

Aladdin Connect Android Application Insecure Storage

Vulnerability Description

Users’ product account authentication data was stored in clear text in The Genie Company Aladdin Connect Mobile Application Version 5.65 Build 2075 (and below) on Android Devices. This allows the attacker, with access to the android device, to potentially retrieve users' clear text authentication credentials.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-5879

Credits & Attribution

No credits recorded in the NVD database.

References

More from The Genie Company

View All →
CVE-2023-5881
Unauthenticated access permitted to web interface page "Garage Door Control Module Setup"
Unknown 0
CVE-2023-5880
Cross-site Scripting (XSS) injected into Aladdin Connect garage door opener (Retrofit-Kit) configuration setup webserver console via broadcast SSID name
Unknown 0

Affected Vendor

The Genie Company

View all reports →

Affected Software

Aladdin Connect Mobile Application
Vulnerable Versions:
0

Timeline

Official Publish: January 3rd, 2024
Last Modified: June 17th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

CWE-922

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.