Buffer Overflow in SunGrow WiNet-SV200 MQTT Message Decryption

CVE-2024-50697

What is CVE-2024-50697?

The WiNet-SV200 product line from SunGrow is susceptible to a buffer overflow vulnerability during the decryption of MQTT messages. Specifically, the parsing of certain TLV fields lacks adequate bounds checks, which may lead to stack-based buffer overflow conditions. This flaw poses a significant risk to the system's integrity and could potentially allow malicious code execution, elevating the need for immediate patches and updates to mitigate potential exploitation.

References