Vulnerability Details CVE-2020-16259
Winston 1.5.4 devices have an SSH user account with access from bastion hosts. This is undocumented in device documents and is not announced to the user.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 59.8%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 10.0
References
Products affected by CVE-2020-16259
-
cpe:2.3:h:winstonprivacy:winston:-
-
cpe:2.3:o:winstonprivacy:winston_firmware:1.5.4