CVE-2024-50694: Sungrowpower Winet-S Firmware

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

In SunGrow WiNet-SV200.001.00.P027 and earlier versions, when copying the timestamp read from an MQTT message, the underlying code does not check the bounds of the buffer that is used to store the message. This may lead to a stack-based buffer overflow.

Affected products

• Sungrowpower Winet-S Firmware: before 200.001.00.p027 (fixed in 200.001.00.p027)

Published 2025-01-24. Last modified 2026-06-17.