Chamberlain MYQ-G0301
From Wiki-IoT
Revision as of 12:17, 25 October 2026 by QF20232859 (talk | contribs) (Created page with "{{Classification |name=Chamberlain MYQ-G0301 |brand=Chamberlain |parent_company=Chamberlain Group |website=https://www.chamberlain.com/ |release_date=2016-09-01 |generation=1...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
| Chamberlain MYQ-G0301 | ||
|---|---|---|
|
Security Grade
Calculator v
|
Chamberlain MYQ-G0301
Brand: Chamberlain (Parent: Chamberlain Group) Category: Smart Garage Door Hub • Model / Gen: 1 MYQ-G0301 Release Date: 2016-09-01 • Status: In sale Classification Date: • Official Website | |
Contents
Security Evaluation
1. Device Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | None | 🔗 Proof | No documented hardware tampering; no exposed debug ports reported |
| Known vulnerabilities | Very common | 🔗 Proof | McAfee (2020) and Trellix demonstrated RF signal capture/replay; CVE-2023-24080 rate-limit flaw |
| Prior attacks | None | 🔗 Proof | Not associated with major botnets like Mirai |
| Updatability | Rare | 🔗 Proof | Firmware updates exist but are infrequent and not fully transparent |
| Category Score | Score: 2 / 3 | ||
2. System Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | Partial | 🔗 Proof | Cloud API uses myQ account, but RF link to sensors has weak authentication (replayable) |
| Communications | Encrypted with obselete encryption | 🔗 Proof | Cloud traffic uses TLS, but 315 MHz RF link was shown to be jammable/replayable |
| Storage | Encrypted with up-to-date encryption | 🔗 Proof | Minimal local storage; account data kept encrypted on cloud |
| Category Score | Score: 2 / 3 | ||
3. User Authentication
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Full | 🔗 Proof | myQ account supports adding/removing users and password change |
| Authentication | Secure | 🔗 Proof | No hardcoded credentials; myQ account required for setup |
| Brute-force protection | Absent | 🔗 Proof | CVE-2023-24080: password reset endpoint has no rate limiting, enabling brute force |
| Event logging | Partial logging | 🔗 Proof | App logs door open/close events but no full security audit log |
| Passwords | Require change after setup with complexity requirements | 🔗 Proof | No default device password; myQ account password required |
| Category Score | Score: 2 / 3 | ||
Technical Specifications
| Property | Details |
|---|---|
| Operating System & App | Proprietary embedded (Companion App: myQ App) |
| Hardware (CPU / GPU) | CPU: • GPU: |
| Memory & Storage | Memory: • Storage: |
| Power, Battery & Charging | Battery: None (wired) • Power: 12V DC adapter • Charging: |
| Display & Camera | Display: LED indicator only • Camera: none |
| Sound & Connectivity | Sound: none • Connectivity: Wi-Fi 802.11b/g/n (2.4 GHz), 315 MHz RF to garage door opener |
| Physical (Dimensions & Mass) | Dimensions: • Mass: |
