CVEvulnerability

CVE-2024-50694

9.8 CRITICAL Published 2025-01-24 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-01-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-121

Description

In SunGrow WiNet-SV200.001.00.P027 and earlier versions, when copying the timestamp read from an MQTT message, the underlying code does not check the bounds of the buffer that is used to store the message. This may lead to a stack-based buffer overflow.

Affected configurations

• sungrowpower winet-s firmware (< 200.001.00.p027)

Related

Weakness · CWE (1)

  • CWE-121 Stack-based Buffer Overflow weakness

References