CVE-2024-50694

critical · 9.8

In SunGrow WiNet-SV200.001.00.P027 and earlier versions, when copying the timestamp read from an MQTT message, the underlying code does not check the bounds of the buffer that is used to store the message. This may lead to a stack-based buffer overflow.

9.8

CVSS

0.6%

EPSS (exploit prob.)

46th

EPSS percentile

2025-01-24

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-121

Affected products

Vendor	Product	Affected versions
sungrowpower	winet-s_firmware	< 200.001.00.p027
sungrowpower	winet-s	all versions

Check a specific version with /api/v1/cve/match.

References

https://en.sungrowpower.com/security-notice-detail-2/5961

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2024-50694