CVE-2024-50694

In SunGrow WiNet-SV200.001.00.P027 and earlier versions, when copying the timestamp read from an MQTT message, the underlying code does not check the bounds of the buffer that is used to store the message. This may lead to a stack-based buffer overflow.
CVSS

No CVSS.

References
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:sungrowpower:winet-s_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:sungrowpower:winet-s:-:*:*:*:*:*:*:*

History

29 May 2025, 16:02

Type Values Removed Values Added
First Time Sungrowpower winet-s Firmware
Sungrowpower winet-s
Sungrowpower
CPE cpe:2.3:h:sungrowpower:winet-s:-:*:*:*:*:*:*:*
cpe:2.3:o:sungrowpower:winet-s_firmware:*:*:*:*:*:*:*:*
References () https://en.sungrowpower.com/security-notice-detail-2/5961 - () https://en.sungrowpower.com/security-notice-detail-2/5961 - Vendor Advisory

24 Jan 2025, 23:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-01-24 23:15

Updated : 2025-05-29 16:02


NVD link : CVE-2024-50694

Mitre link : CVE-2024-50694


JSON object : View

Products Affected

sungrowpower

  • winet-s_firmware
  • winet-s
CWE

No CWE.