CVE-2024-50695: Stack-based Buffer Overflow

SunGrow WiNet-SV200.001.00.P027 and earlier versions is vulnerable to stack-based buffer overflow when parsing MQTT messages, due to missing MQTT topic bounds checks...

PT-2025-2887 · Sungrow · Sungrow Winet-Sv200

Name of the Vulnerable Software and Affected Versions: SunGrow WiNet-SV200 versions 0.001.00.P027 and earlier Description: The issue arises when decrypting MQTT messages, specifically due to insufficient bounds checks in the code that parses certain TLV fields. This may lead to a stack-based buff...

CVE-2024-50694: Stack-based Buffer Overflow

In SunGrow WiNet-SV200.001.00.P027 and earlier versions, when copying the timestamp read from an MQTT message, the underlying code does not check the bounds of the buffer that is used to store the message. This may lead to a stack-based buffer overflow...

CVE-2024-50698

The SunGrow WiNet-SV200 (versions 0.001.00.P027 and earlier) is vulnerable to a heap-based buffer overflow caused by insufficient bounds checks on MQTT message content . This vulnerability could allow an attacker to potentially exploit the system. While some sources mention a related stack buffer...

CVE-2024-50697

The SunGrow WiNet-S (or WiNet-SV200 ) LAN communication module is vulnerable to a stack-based buffer overflow in versions 0.001.00.P027 and earlier. The root cause is a lack of sufficient bounds checks when the software parses specific TLV fields while decrypting MQTT messages . An attacker could...

SunGrow WiNet-S 安全漏洞

SunGrow WiNet-S is a LAN communication module from SunGrow, China. A security vulnerability exists in SunGrow WiNet-S version V200.001.00.P027 and prior versions, which can be exploited by an attacker to decrypt all firmware updates...

SunGrow WiNet-S 安全漏洞

SunGrow WiNet-S is a LAN communication module from SunGrow, China. A stack buffer overflow vulnerability exists in the SunGrow WiNet-S TLV field that originates from code that does not have sufficient boundary checks when parsing a specific TLV field. An attacker could exploit this vulnerability ...

CVE-2024-50694

The SunGrow WiNet-SV200 (versions 0.001.00.P027 and earlier) is vulnerable to a stack-based buffer overflow . The root cause is the failure of the underlying code to perform bounds checking on the buffer used to store messages when copying the timestamp read from an MQTT message . An attacker cou...