critical9.8
CVE-2020-16259
Winston 1.5.4 devices have an SSH user account with access from bastion hosts.
Impact
Winston 1.5.4 devices have an SSH user account with access from bastion hosts. This is undocumented in device documents and is not announced to the user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Winstonprivacy | Winston Firmware | Version 1.5.4 |