← Database

CVE-2023-24080

CRITICAL CVSS: 9.8 Published: 2023-02-21 Modified: 2026-07-09

Description

A lack of rate limiting on the password reset endpoint of Chamberlain myQ v5.222.0.32277 (on iOS) allows attackers to compromise user accounts via a bruteforce attack.

Affected Platforms

Chamberlain Myq

Weakness Type

CWE-307, CWE-307

References