Sungrow WiNet-S Buffer Overflow Vulnerability in MQTT Message Parsing Allowing Denial-of-Service and Remote Code Execution

A stack-based buffer overflow vulnerability has been identified in Sungrow WiNet-S version WINET-SV200.001.00.P027 and earlier. This vulnerability arises from inadequate bounds checking of MQTT topics, which can be exploited when the device processes MQTT messages. The flaw could lead to a denial-of-service condition or allow for remote code execution on the affected device.

Impact

Exploitation of this vulnerability causes a stack-based buffer overflow, which can be leveraged to execute arbitrary code remotely or create a denial-of-service condition on the device.

Remediation

Users are advised to upgrade to WiNet-S version WINET-SV200.001.00.P028 or higher.