CVE-2024-50694

CRITICAL

SunGrow WiNet-S < 200.001.00.p027 - Stack-based Buffer Overflow via MQTT Timestamp Handling

Title source: llm
STIX 2.1

Description

In SunGrow WiNet-SV200.001.00.P027 and earlier versions, when copying the timestamp read from an MQTT message, the underlying code does not check the bounds of the buffer that is used to store the message. This may lead to a stack-based buffer overflow.

References (1)

Core 1

Scores

CVSS v3 9.8
EPSS 0.0055
EPSS Percentile 41.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-121
Status published
Products (1)
sungrowpower/winet-s_firmware < 200.001.00.p027
Published Jan 24, 2025
Tracked Since Feb 18, 2026