CVE-2024-50694: Buffer Overflow
In SunGrow WiNet-SV200.001.00.P027 and earlier versions, when copying the timestamp read from an MQTT message, the underlying code does not check the bounds of the buffer that is used to store the message. This may lead to a stack-based buffer overflow.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50694?
CVE-2024-50694 is classified as a high severity vulnerability due to the risk of stack-based buffer overflow.
How do I fix CVE-2024-50694?
To fix CVE-2024-50694, upgrade to the latest version of SunGrow WiNet-SV200 that addresses the buffer overflow issue.
What systems are affected by CVE-2024-50694?
CVE-2024-50694 affects SunGrow WiNet-SV200 versions up to and including 200.001.00.P027.
What type of vulnerability is CVE-2024-50694?
CVE-2024-50694 is a stack-based buffer overflow vulnerability related to the handling of MQTT message timestamps.
Can CVE-2024-50694 be exploited remotely?
Yes, CVE-2024-50694 can potentially be exploited remotely through malicious MQTT messages, leading to severe consequences.