CVE-2024-50697

In SunGrow WiNet-SV200.001.00.P027 and earlier versions, when decrypting MQTT messages, the code that parses specific TLV fields does not have sufficient bounds checks. This may result in a stack-based buffer overflow.

Score

CVSS 3.1 8.1 High

Status

Analyzed - cve@mitre.org

Published

2025-01-24

Last modified

2025-01-27

Weaknesses

CWE-120

Affected products

• Winet-s Firmware (Sungrowpower)

References

• https://en.sungrowpower.com/security-notice-detail-2/5961