VULNERABILITY INTELLIGENCE

CVE-2024-50694

CVSS score9.8 CRITICAL
EPSS probability0.57%
CISA KEVNot currently listed
Published2025-01-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

In SunGrow WiNet-SV200.001.00.P027 and earlier versions, when copying the timestamp read from an MQTT message, the underlying code does not check the bounds of the buffer that is used to store the message. This may lead to a stack-based buffer overflow.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-121

Primary references