high7.5
CVE-2020-16260
Winston 1.5.4 devices do not enforce authorization.
Impact
Winston 1.5.4 devices do not enforce authorization. This is exploitable from the intranet, and can be combined with other vulnerabilities for remote exploitation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Winstonprivacy | Winston Firmware | Version 1.5.4 |