Winet S Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:sungrowpower:winet-s_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Sungrowpower (1ae84c76-b85c-5e3f-aa5f-1510c9eb0f1e) |
|---|---|
| Product | Winet S Firmware (705a0b97-aa3d-5c92-aa7b-82db505e7644) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-50698 |
vulnerable | 2026-06-08 06:52:11.406328 |
Details available
SunGrow WiNet-SV200.001.00.P027 and earlier versions is vulnerable to heap-based buffer overflow due to bounds checks of the MQTT message content.
Published: 2025-01-24T00:00:00.000Z
Updated: 2025-09-15T15:35:57.908Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-50697 |
vulnerable | 2026-06-08 06:52:11.405826 |
Details available
In SunGrow WiNet-SV200.001.00.P027 and earlier versions, when decrypting MQTT messages, the code that parses specific TLV fields does not have sufficient bounds checks. This may result in a stack-based buffer overflow.
Published: 2025-01-24T00:00:00.000Z
Updated: 2025-01-27T15:37:57.414Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-50696 |
vulnerable | 2026-06-08 06:52:11.405453 |
Details available
SunGrow WiNet-S V200.001.00.P025 and earlier versions is missing integrity checks for firmware upgrades. Sending a specific MQTT message allows an update to an inverter or a WiNet connectivity dongle with a bogus firmware file that is located on attacker-controlled server.
Published: 2025-02-26T00:00:00.000Z
Updated: 2025-03-04T21:09:49.150Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-50695 |
vulnerable | 2026-06-08 06:52:11.404885 |
Details available
SunGrow WiNet-SV200.001.00.P027 and earlier versions is vulnerable to stack-based buffer overflow when parsing MQTT messages, due to missing MQTT topic bounds checks.
Published: 2025-01-24T00:00:00.000Z
Updated: 2025-02-05T14:32:09.430Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-50694 |
vulnerable | 2026-06-08 06:52:11.404315 |
Details available
In SunGrow WiNet-SV200.001.00.P027 and earlier versions, when copying the timestamp read from an MQTT message, the underlying code does not check the bounds of the buffer that is used to store the message. This may lead to a stack-based buffer overflow.
Published: 2025-01-24T00:00:00.000Z
Updated: 2025-02-05T14:32:28.508Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-50692 |
vulnerable | 2026-06-08 06:52:11.403554 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-50690 |
vulnerable | 2026-06-08 06:52:11.399499 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.