CVE-2024-50695

Severity CVSS v4.0:
Pending analysis
Type:
CWE-121 Stack-based Buffer Overflow
Publication date:
24/01/2025
Last modified:
29/05/2025

Description

SunGrow WiNet-SV200.001.00.P027 and earlier versions is vulnerable to stack-based buffer overflow when parsing MQTT messages, due to missing MQTT topic bounds checks.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:sungrowpower:winet-s_firmware:*:*:*:*:*:*:*:* 200.001.00.p027 (excluding)
cpe:2.3:h:sungrowpower:winet-s:-:*:*:*:*:*:*:*


References to Advisories, Solutions, and Tools