What’s Vulnerable › Vulnerabilities
CVE-2024-50694
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.6% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-01-24 · updated 2026-06-17
- Weakness: CWE-121
Description
In SunGrow WiNet-SV200.001.00.P027 and earlier versions, when copying the timestamp read from an MQTT message, the underlying code does not check the bounds of the buffer that is used to store the message. This may lead to a stack-based buffer overflow.
Affected products
- Sungrowpower Winet-S Firmware: before 200.001.00.p027 — fixed in 200.001.00.p027
How to fix
Upgrade to a fixed version: Sungrowpower Winet-S Firmware 200.001.00.p027. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2024-50694 or the next vulnerability affects your stack