Winstonprivacy vulnerabilities

Products

• Winston Firmware 8

Newest

• winstonprivacy winston firmware Winston 1.5.4 devices have an SSH user account with access from bastion hosts. This is... CVE-2020-16259 9.8 CriticalOctober 28, 2020
• winstonprivacy winston firmware Winston 1.5.4 devices make use of a Monit service (not managed during the normal user process)... CVE-2020-16258 7.1 HighOctober 28, 2020
• winstonprivacy winston firmware Winston 1.5.4 devices do not enforce authorization. This is exploitable from the intranet, and... CVE-2020-16260 7.5 HighOctober 28, 2020
• winstonprivacy winston firmware Winston 1.5.4 devices have a CORS configuration that trusts arbitrary origins. This allows... CVE-2020-16263 9.1 CriticalOctober 28, 2020
• winstonprivacy winston firmware Winston 1.5.4 devices have a local www-data user that is overly permissioned, resulting in root... CVE-2020-16262 7.8 HighOctober 28, 2020
• winstonprivacy winston firmware Winston 1.5.4 devices allow a U-Boot interrupt, resulting in local root access. CVE-2020-16261 6.8 MediumOctober 28, 2020
• winstonprivacy winston firmware The API on Winston 1.5.4 devices is vulnerable to CSRF. CVE-2020-16256 8.8 HighOctober 28, 2020
• winstonprivacy winston firmware Winston 1.5.4 devices are vulnerable to command injection via the API. CVE-2020-16257 9.8 CriticalOctober 28, 2020