CVE-2024-50694
Last modified
CVE-2024-50694 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. In SunGrow WiNet-SV200.001.00.P027 and earlier versions, when copying the timestamp read from an MQTT message, the underlying code does not check the bounds of the buffer that is used to store the message. This may lead to a stack-based buffer overflow.. EPSS estimates a 0.55% chance of exploitation in the next 30 days.
Description
In SunGrow WiNet-SV200.001.00.P027 and earlier versions, when copying the timestamp read from an MQTT message, the underlying code does not check the bounds of the buffer that is used to store the message. This may lead to a stack-based buffer overflow.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Sungrowpower | Winet-S Firmware | < 200.001.00.p027 |
References
- https://en.sungrowpower.com/security-notice-detail-2/5961Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-50694?
How severe is CVE-2024-50694?
How do I fix CVE-2024-50694?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-50689SunGrow iSolarCloud before the October 31, 2024 remediation …9.1
- CVE-2024-5069A vulnerability, which was classified as critical, has been …9.8
- CVE-2024-50690SunGrow WiNet-SV200.001.00.P027 and earlier versions contain…6.5
- CVE-2024-50691SunGrow iSolarCloud Android app V2.1.6.20241104 and prior su…7.4
- CVE-2024-50692SunGrow WiNet-SV200.001.00.P027 and earlier versions contain…5.4
- CVE-2024-50693SunGrow iSolarCloud before the October 31, 2024 remediation …9.1
- CVE-2024-50695SunGrow WiNet-SV200.001.00.P027 and earlier versions is vuln…9.8
- CVE-2024-50696SunGrow WiNet-S V200.001.00.P025 and earlier versions is mis…7.5
- CVE-2024-50697In SunGrow WiNet-SV200.001.00.P027 and earlier versions, whe…8.1
- CVE-2024-50698SunGrow WiNet-SV200.001.00.P027 and earlier versions is vuln…9.8
- CVE-2024-50699TP-Link TL-WR845N(UN)_V4_201214, TL-WR845N(UN)_V4_200909 and…8
- CVE-2024-50701TeamPass before 3.1.3.1, when retrieving information about a…4.3
Are you affected by CVE-2024-50694?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST