Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-50631 State: PUBLISHED Published: 2025-03-19T05:50:08.565Z Last Updated: 2025-03-19T14:37:54.900Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Synology Products: Synology Drive Server Problem Types: CWE-89 Description: Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in the system syncing daemon in Synology Drive Server before 3.0.4-12699, 3.2.1-23280, 3.5.0-26085 and 3.5.1-26102 allows remote attackers to inject SQL commands, limited to write operations, via unspecified vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.synology.com/en-global/security/advi
ctors. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_24_21
CVE ID: CVE-2024-50633 State: PUBLISHED Published: 2025-01-16T00:00:00.000Z Last Updated: 2025-02-18T21:00:48.454Z Severity: NONE (CVSS N/A CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N) Vendors: CERN Products: Indico Problem Types: CWE-201 Description: A Broken Object Level Authorization (BOLA) vulnerability in Indico through 3.3.5 allows attackers to read information by sending a crafted POST request to the component /api/principals. NOTE: this is disputed by the Supplier because the product intentionally lets all users retrieve certain information about other user accounts (this functionality is, in the current design, not restricted to any privileged roles such as event organizer). Additi
s (this functionality is, in the current design, not restricted to any privileged roles such as event organizer). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/cetinpy/CVE-2024-50633 - https://github.com/cetinpy/CVE-2024-50633/issues/1
CVE ID: CVE-2024-50634 State: PUBLISHED Published: 2024-11-08T00:00:00 Last Updated: 2024-11-13T14:57:46.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in a weak JWT token in Watcharr v1.43.0 and below allows attackers to perform privilege escalation using a crafted JWT token. This vulnerability is not limited to privilege escalation but also affects all functions that require authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://youtu.be/wnULru0WdtA - https://github.com/yamerooo123/CVE/tree/main/CVE-2024-50634
CVE ID: CVE-2024-50636 State: PUBLISHED Published: 2024-11-11T00:00:00 Last Updated: 2024-11-19T19:07:43.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: PyMOL 2.5.0 contains a vulnerability in its "Run Script" function, which allows the execution of arbitrary Python code embedded within .PYM files. Attackers can craft a malicious .PYM file containing a Python reverse shell payload and exploit the function to achieve Remote Command Execution (RCE). This vulnerability arises because PyMOL treats .PYM files as Python scripts without properly validating or restricting the commands within the script, enabling attackers to run unauthorized commands in the context of the user runnin
icting the commands within the script, enabling attackers to run unauthorized commands in the context of the user running the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/schrodinger/pymol-open-source/issues/405 - https://github.com/yamerooo123/CVE/blob/main/CVE-2024-50636/Description.md - https://youtu.be/SWnN_a1tUNc
CVE ID: CVE-2024-50637 State: PUBLISHED Published: 2024-11-06T00:00:00 Last Updated: 2024-11-07T14:06:04.383094 Vendors: n/a Products: n/a Problem Types: n/a Description: UnoPim 0.1.3 and below is vulnerable to Cross Site Scripting (XSS) in the Create User function. This allows attackers to perform XSS via an SVG document, which can be used to steal cookies. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/unopim/unopim/issues/41 - https://github.com/unopim/unopim/releases/tag/v0.1.4 - https://github.com/yamerooo123/ResearchNBugBountyEncyclopedia/blob/main/Researches/Unopim/Findings.md
CVE ID: CVE-2024-50640 State: PUBLISHED Published: 2025-08-20T00:00:00.000Z Last Updated: 2025-08-21T14:48:56.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: jeewx-boot 1.3 has an authentication bypass vulnerability in the preHandle function Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jeecgboot/jeewx-boot/issues/46
CVE ID: CVE-2024-50641 State: PUBLISHED Published: 2025-08-21T00:00:00.000Z Last Updated: 2025-08-21T18:56:26.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authentication bypass vulnerability in PandoraNext-TokensTool v0.6.8 and before. An attacker can exploit this vulnerability to access API without any token. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/RacerZ-fighting/CVE-vulns/blob/main/PandoraNext-TokensTool-Vuln.md
CVE ID: CVE-2024-50644 State: PUBLISHED Published: 2025-08-22T00:00:00.000Z Last Updated: 2025-08-26T14:08:05.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: zhisheng17 blog 3.0.1-SNAPSHOT has an authentication bypass vulnerability. An attacker can exploit this vulnerability to access API without any token. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/zhisheng17/blog/issues/64 - https://github.com/zhisheng17/blog - https://gitee.com/fushuling/cve/blob/master/CVE-2024-50644.md
CVE ID: CVE-2024-50645 State: PUBLISHED Published: 2025-08-22T00:00:00.000Z Last Updated: 2025-08-22T17:50:23.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: MallChat v1.0-SNAPSHOT has an authentication bypass vulnerability. An attacker can exploit this vulnerability to access API without any token. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/zongzibinbin/MallChat/issues/179 - https://github.com/zongzibinbin/MallChat - https://gitee.com/fushuling/cve/blob/master/CVE-2024-50645.md
CVE ID: CVE-2024-50647 State: PUBLISHED Published: 2024-11-15T00:00:00 Last Updated: 2024-12-03T16:43:41.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: The python_food ordering system V1.0 has an unauthorized vulnerability that leads to the leakage of sensitive user information. Attackers can access it through https://ip:port/api/myapp/index/user/info?id=1 And modify the ID value to obtain sensitive user information beyond authorization. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Yllxx03/CVE/blob/main/python_food_Information_Disclosure.md - https://github.com/Yllxx03/CVE/tree/main/CVE-2024-50647
CVE ID: CVE-2024-50648 State: PUBLISHED Published: 2024-11-15T00:00:00 Last Updated: 2024-12-03T16:35:37.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: yshopmall V1.0 has an arbitrary file upload vulnerability, which can enable RCE or even take over the server when improperly configured to parse JSP files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Yllxx03/CVE/blob/main/yshop_fileu_pload.md - https://github.com/Yllxx03/CVE/tree/main/CVE-2024-50648
CVE ID: CVE-2024-50649 State: PUBLISHED Published: 2024-11-15T00:00:00 Last Updated: 2024-12-03T16:26:52.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: The user avatar upload function in python_book V1.0 has an arbitrary file upload vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Yllxx03/CVE/blob/main/python_book/FileUpload.md - https://github.com/Yllxx03/CVE/tree/main/CVE-2024-50649
CVE ID: CVE-2024-50650 State: PUBLISHED Published: 2024-11-15T00:00:00 Last Updated: 2024-12-03T16:19:53.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: python_book V1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of users with different IDs by modifying the ID parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Yllxx03/CVE/blob/main/python_book/BrokenAccessControl.md - https://github.com/Yllxx03/CVE/tree/main/CVE-2024-50650
CVE ID: CVE-2024-50651 State: PUBLISHED Published: 2024-11-15T00:00:00 Last Updated: 2024-11-27T20:23:31.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: java_shop 1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of users with different IDs by modifying the ID parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Yllxx03/CVE/blob/main/java_shop/BrokenAccessControl.md - https://github.com/Yllxx03/CVE/tree/main/CVE-2024-50651
CVE ID: CVE-2024-50652 State: PUBLISHED Published: 2024-11-15T00:00:00 Last Updated: 2024-11-21T19:34:07.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: A file upload vulnerability in java_shop 1.0 allows attackers to upload arbitrary files by modifying the avatar function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Yllxx03/CVE/blob/main/java_shop/FileUpload.md - https://github.com/Yllxx03/CVE/tree/main/CVE-2024-50652
CVE ID: CVE-2024-50653 State: PUBLISHED Published: 2024-11-15T00:00:00.000Z Last Updated: 2025-03-13T15:33:35.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRMEB <=5.4.0 is vulnerable to Incorrect Access Control. Users can bypass the front-end restriction of only being able to claim coupons once by capturing packets and sending a large number of data packets for coupon collection, achieving unlimited coupon collection. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/crmeb - https://github.com/Yllxx03/CVE/tree/main/CVE-2024-50653
CVE ID: CVE-2024-50654 State: PUBLISHED Published: 2024-11-15T00:00:00 Last Updated: 2024-11-21T19:03:34.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: lilishop <=4.2.4 is vulnerable to Incorrect Access Control, which can allow attackers to obtain coupons beyond the quantity limit by capturing and sending the data packets for coupon collection in high concurrency. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Yllxx03/CVE/blob/main/lilishop/CouponLogicVulnerability.md - https://github.com/Yllxx03/CVE/tree/main/CVE-2024-50654
CVE ID: CVE-2024-50655 State: PUBLISHED Published: 2024-11-15T00:00:00 Last Updated: 2024-11-20T20:57:53.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: emlog pro <=2.3.18 is vulnerable to Cross Site Scripting (XSS), which allows attackers to write malicious JavaScript code in published articles. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Yllxx03/CVE/blob/main/emlog/XSS.md - https://github.com/Yllxx03/CVE/tree/main/CVE-2024-50655
CVE ID: CVE-2024-50656 State: PUBLISHED Published: 2025-02-03T00:00:00.000Z Last Updated: 2025-03-19T17:49:55.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: itsourcecode Placement Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the Full Name field in registration.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://itsourcecode.com/free-projects/php-project/placement-management-system-project-in-php-with-source-code/ - https://github.com/riya98241/CVE/blob/main/CVE-2024-50656
CVE ID: CVE-2024-50657 State: PUBLISHED Published: 2024-11-22T00:00:00 Last Updated: 2024-11-27T16:47:58.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Owncloud android apk v.4.3.1 allows a physically proximate attacker to escalate privileges via the PassCodeViewModel class, specifically in the checkPassCodeIsValid method Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://drive.google.com/drive/folders/1C-ZYjYhmKRGvWs9YN51XOiAS2WxxwdQd?usp=sharing - https://github.com/SAHALLL/CVE-2024-50657
CVE ID: CVE-2024-50658 State: PUBLISHED Published: 2025-01-07T00:00:00 Last Updated: 2025-01-08T15:23:20.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Server-Side Template Injection (SSTI) was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the shippingAsBilling and firstname parameters in updateuserinfo.html file Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://adportal.com - http://ipublish.com - https://petercipolone.info/wp-content/uploads/2025/01/iPublishMedia_AdPortal3.0.39_CVEs.pdf
CVE ID: CVE-2024-50659 State: PUBLISHED Published: 2025-01-07T00:00:00 Last Updated: 2025-01-08T15:18:41.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability iPublish Media Solutions AdPortal 3.0.39 allows a remote attacker to escalate privileges via the shippingAsBilling parameter in updateuserinfo.html. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://adportal.com - http://ipublish.com - https://petercipolone.info/wp-content/uploads/2025/01/iPublishMedia_AdPortal3.0.39_CVEs.pdf
CVE ID: CVE-2024-50660 State: PUBLISHED Published: 2025-01-07T00:00:00 Last Updated: 2025-01-08T15:16:09.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload Bypass was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the file upload functionality Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://adportal.com - http://ipublish.com - https://petercipolone.info/wp-content/uploads/2025/01/iPublishMedia_AdPortal3.0.39_CVEs.pdf
CVE ID: CVE-2024-50664 State: PUBLISHED Published: 2025-01-23T00:00:00.000Z Last Updated: 2025-01-28T16:24:11.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: gpac 2.4 contains a heap-buffer-overflow at isomedia/sample_descs.c:1799 in gf_isom_new_mpha_description in gpac/MP4Box. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2988
CVE ID: CVE-2024-50665 State: PUBLISHED Published: 2025-01-23T00:00:00.000Z Last Updated: 2025-01-28T16:05:29.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: gpac 2.4 contains a SEGV at src/isomedia/drm_sample.c:1562:96 in isom_cenc_get_sai_by_saiz_saio in MP4Box. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2987
CVE ID: CVE-2024-50667 State: PUBLISHED Published: 2024-11-11T00:00:00 Last Updated: 2024-11-12T16:58:42.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: The boa httpd of Trendnet TEW-820AP 1.01.B01 has a stack overflow vulnerability in /boafrm/formIPv6Addr, /boafrm/formIpv6Setup, /boafrm/formDnsv6. The reason is that the check of ipv6 address is not sufficient, which allows attackers to construct payloads for attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ixout/iotVuls/blob/main/Trendnet/TEW_820/report.md - https://www.trendnet.com/support/support-detail.asp?prod=100_TEW-820AP
CVE ID: CVE-2024-50671 State: PUBLISHED Published: 2024-11-25T00:00:00 Last Updated: 2024-12-04T16:14:46.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in Adapt Learning Adapt Authoring Tool <= 0.11.3 allows attackers with Authenticated User roles to obtain email addresses via the "Get users" feature. The vulnerability occurs due to a flaw in permission verification logic, where the wildcard character in permitted URLs grants unintended access to endpoints restricted to users with Super Admin roles. This makes it possible for attackers to disclose the email addresses of all users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
ers to disclose the email addresses of all users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/adaptlearning/adapt_authoring - https://github.com/dos-m0nk3y/CVE/tree/main/CVE-2024-50671
CVE ID: CVE-2024-50672 State: PUBLISHED Published: 2024-11-25T00:00:00 Last Updated: 2024-11-27T16:33:12.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NoSQL injection vulnerability in Adapt Learning Adapt Authoring Tool <= 0.11.3 allows unauthenticated attackers to reset user and administrator account passwords via the "Reset password" feature. The vulnerability occurs due to insufficient validation of user input, which is used as a query in Mongoose's find() function. This makes it possible for attackers to perform a full takeover of the administrator account. Attackers can then use the newly gained administrative privileges to upload a custom plugin to perform remote co
ccount. Attackers can then use the newly gained administrative privileges to upload a custom plugin to perform remote code execution (RCE) on the server hosting the web application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/adaptlearning/adapt_authoring - https://github.com/dos-m0nk3y/CVE/tree/main/CVE-2024-50672
CVE ID: CVE-2024-50677 State: PUBLISHED Published: 2024-12-06T00:00:00 Last Updated: 2024-12-06T16:44:57.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in OroPlatform CMS v5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/oroinc/orocommerce-application - https://github.com/ZumiYumi/CVE-2024-50677
CVE ID: CVE-2024-50684 State: PUBLISHED Published: 2025-02-26T00:00:00.000Z Last Updated: 2025-03-05T14:43:15.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: SunGrow iSolarCloud Android app V2.1.6.20241017 and prior uses an insecure AES key to encrypt client data (insufficient entropy). This may allow attackers to decrypt intercepted communications between the mobile app and iSolarCloud. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://en.sungrowpower.com/security-notice-detail-2/6126
CVE ID: CVE-2024-50685 State: PUBLISHED Published: 2025-02-26T00:00:00.000Z Last Updated: 2025-03-04T21:52:21.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: SunGrow iSolarCloud before the October 31, 2024 remediation, is vulnerable to insecure direct object references (IDOR) via the powerStationService API model. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://en.sungrowpower.com/security-notice-detail-2/6118
CVE ID: CVE-2024-50686 State: PUBLISHED Published: 2025-02-26T00:00:00.000Z Last Updated: 2025-03-04T21:22:06.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the commonService API model. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://en.sungrowpower.com/security-notice-detail-2/6112
CVE ID: CVE-2024-50687 State: PUBLISHED Published: 2025-02-26T00:00:00.000Z Last Updated: 2025-03-04T21:20:23.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the devService API model. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://en.sungrowpower.com/security-notice-detail-2/6114
CVE ID: CVE-2024-50688 State: PUBLISHED Published: 2025-02-26T00:00:00.000Z Last Updated: 2025-03-04T21:19:16.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: SunGrow iSolarCloud Android application V2.1.6.20241017 and prior contains hardcoded credentials. The application (regardless of the user account) and the cloud uses the same MQTT credentials for exchanging the device telemetry. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://en.sungrowpower.com/security-notice-detail-2/6122
CVE ID: CVE-2024-50689 State: PUBLISHED Published: 2025-02-26T00:00:00.000Z Last Updated: 2025-03-04T21:18:04.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the orgService API model. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://en.sungrowpower.com/security-notice-detail-2/6116
CVE ID: CVE-2024-50690 State: PUBLISHED Published: 2025-01-24T00:00:00.000Z Last Updated: 2025-02-06T21:26:55.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: SunGrow WiNet-SV200.001.00.P027 and earlier versions contains a hardcoded password that can be used to decrypt all firmware updates. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://en.sungrowpower.com/security-notice-detail-2/5961
CVE ID: CVE-2024-50691 State: PUBLISHED Published: 2025-02-26T00:00:00.000Z Last Updated: 2025-03-04T21:15:45.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: SunGrow iSolarCloud Android app V2.1.6.20241104 and prior suffers from Missing SSL Certificate Validation. The app explicitly ignores certificate errors and is vulnerable to MiTM attacks. Attackers can impersonate the iSolarCloud server and communicate with the Android app. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://en.sungrowpower.com/security-notice-detail-2/6124
CVE ID: CVE-2024-50692 State: PUBLISHED Published: 2025-01-24T00:00:00.000Z Last Updated: 2025-02-06T16:15:21.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: SunGrow WiNet-SV200.001.00.P027 and earlier versions contains hardcoded MQTT credentials that allow an attacker to send arbitrary commands to an arbitrary inverter. It is also possible to impersonate the broker, because TLS is not used to identify the real MQTT broker. This means that MQTT communications are vulnerable to MitM attacks at the TCP/IP level. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://en.sungrowpower.com/security-notice-detail-2/5961
CVE ID: CVE-2024-50693 State: PUBLISHED Published: 2025-02-26T00:00:00.000Z Last Updated: 2025-03-04T21:13:37.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the userService API model. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://en.sungrowpower.com/security-notice-detail-2/6120
CVE ID: CVE-2024-50694 State: PUBLISHED Published: 2025-01-24T00:00:00.000Z Last Updated: 2025-02-05T14:32:28.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SunGrow WiNet-SV200.001.00.P027 and earlier versions, when copying the timestamp read from an MQTT message, the underlying code does not check the bounds of the buffer that is used to store the message. This may lead to a stack-based buffer overflow. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://en.sungrowpower.com/security-notice-detail-2/5961
CVE ID: CVE-2024-50695 State: PUBLISHED Published: 2025-01-24T00:00:00.000Z Last Updated: 2025-02-05T14:32:09.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: SunGrow WiNet-SV200.001.00.P027 and earlier versions is vulnerable to stack-based buffer overflow when parsing MQTT messages, due to missing MQTT topic bounds checks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://en.sungrowpower.com/security-notice-detail-2/5961
CVE ID: CVE-2024-50696 State: PUBLISHED Published: 2025-02-26T00:00:00.000Z Last Updated: 2025-03-04T21:09:49.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: SunGrow WiNet-S V200.001.00.P025 and earlier versions is missing integrity checks for firmware upgrades. Sending a specific MQTT message allows an update to an inverter or a WiNet connectivity dongle with a bogus firmware file that is located on attacker-controlled server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://en.sungrowpower.com/security-notice-detail-2/6140