Description
In SunGrow WiNet-SV200.001.00.P027 and earlier versions, when decrypting MQTT messages, the code that parses specific TLV fields does not have sufficient bounds checks. This may result in a stack-based buffer overflow.
Advisories 1
- ICSA-25-072-12 Sungrow iSolarCloud Android App, WiNet Firmware CISA ICS & IT advisories · Mar 13, 2025