CVE-2024-50698

Critical

Description

SunGrow WiNet-SV200.001.00.P027 and earlier versions is vulnerable to heap-based buffer overflow due to bounds checks of the MQTT message content.

SeverityCritical
CVSS9.8
Exploit probability—
ProductSungrowpower Winet-s Firmware
PublishedJan 24, 2025
First seenJan 24, 2025
Weakness typeCWE-122CWE-122

How to fix

Update
  • sungrowpower winet-s_firmware200.001.00.p027 or later

Affected products

ProductAffected versionsFixed in
sungrowpower winet-s_firmwarev < 200.001.00.p027200.001.00.p027

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.