CVE-2023-24080

CriticalCVSS 9.8

Published: 21/02/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.93%

56th percentile - higher than 56% of all known CVEs

Summary

A vulnerability in the Chamberlain myQ iOS application version v5.222.0.32277 is due to a lack of rate limiting on the password reset endpoint. This allows attackers to perform a brute-force attack to compromise user accounts.

Risk Assessment

The organization faces the risk of user account takeover, which could lead to unauthorized access to gate control systems and potential physical security breaches.

Recommendation

Immediately update the Chamberlain myQ application to the latest version that includes rate limiting mechanisms. Additionally, implement multi-factor authentication for all accounts.

Original NVD description (English source)

A lack of rate limiting on the password reset endpoint of Chamberlain myQ v5.222.0.32277 (on iOS) allows attackers to compromise user accounts via a bruteforce attack.