high7.8
CVE-2020-16262
Winston 1.5.4 devices have a local www-data user that is overly permissioned, resulting in root privilege escalation.
Impact
Winston 1.5.4 devices have a local www-data user that is overly permissioned, resulting in root privilege escalation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Winstonprivacy | Winston Firmware | Version 1.5.4 |