Sungrow WiNet-S Buffer Overflow Vulnerability Allowing Denial-of-Service and Remote Code Execution

A stack-based buffer overflow vulnerability has been identified in Sungrow WiNet-SV200.001.00.P027 and earlier versions. The issue arises when the firmware copies timestamps from MQTT messages without properly checking the buffer size, potentially leading to memory corruption.

Impact

Exploitation of this vulnerability can cause a stack-based buffer overflow, which may be leveraged to execute arbitrary code remotely or cause a denial-of-service condition.

Remediation

Users are advised to upgrade to WiNet-SV200.001.00.P028 or higher.