CVE-2023-24080

Affected product: Chamberlain myQ (iOS) v5.222.0.32277. Root cause: lack of rate limiting on the password reset endpoint. Impact: enables brute-force attacks to compromise user accounts. Remediation: implement rate limiting and apply available patch; some sources also suggest disabling the passwo...