Stack-Based Buffer Overflow Vulnerability in SunGrow WiNet-SV200

CVE-2024-50695

What is CVE-2024-50695?

The SunGrow WiNet-SV200 versions up to 0.001.00.P027 are susceptible to a stack-based buffer overflow when handling MQTT messages. This vulnerability arises from inadequate boundary checks for MQTT topic strings, potentially allowing an attacker to exploit the flaw by crafting malicious MQTT messages. Successful exploitation could compromise system integrity, leading to unauthorized access or execution of arbitrary code.

References