CVE-2024-50694

9.8 criticalEPSS 0.6%

Critical (9.8) in sungrowpower winet-s firmware. EPSS 0.6% chance of exploitation in the next 30 days.

In SunGrow WiNet-SV200.001.00.P027 and earlier versions, when copying the timestamp read from an MQTT message, the underlying code does not check the bounds of the buffer that is used to store the message. This may lead to a stack-based buffer overflow.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
CWE: CWE-121
Published: 2025-01-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sungrowpower:winet-s_firmware

References

https://en.sungrowpower.com/security-notice-detail-2/5961

Check your stack JSON