Winstonprivacy Winston
Approved changes feed: RSS · Atom
cpe:2.3:h:winstonprivacy:winston:-:*:*:*:*:*:*:*part: h version: - update: *
| Vendor | Winstonprivacy (fec77824-9cf6-5b75-9a31-bdda36a6f46d) |
|---|---|
| Product | Winston (8b823fae-9fe0-5de1-b7fb-c10f41a7f06c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-16263 |
not_vulnerable | 2026-06-08 05:19:27.861031 |
Details available
Winston 1.5.4 devices have a CORS configuration that trusts arbitrary origins. This allows requests to be made and viewed by arbitrary origins.
Published: 2020-10-28T17:13:58.000Z
Updated: 2024-08-04T13:37:54.210Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-16262 |
not_vulnerable | 2026-06-08 05:19:27.860578 |
Details available
Winston 1.5.4 devices have a local www-data user that is overly permissioned, resulting in root privilege escalation.
Published: 2020-10-28T17:12:13.000Z
Updated: 2024-08-04T13:37:54.246Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-16261 |
not_vulnerable | 2026-06-08 05:19:27.859873 |
Details available
Winston 1.5.4 devices allow a U-Boot interrupt, resulting in local root access.
Published: 2020-10-28T17:10:32.000Z
Updated: 2024-08-04T13:37:54.235Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-16260 |
not_vulnerable | 2026-06-08 05:19:27.859555 |
Details available
Winston 1.5.4 devices do not enforce authorization. This is exploitable from the intranet, and can be combined with other vulnerabilities for remote exploitation.
Published: 2020-10-28T17:15:56.000Z
Updated: 2024-08-04T13:37:54.250Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-16259 |
not_vulnerable | 2026-06-08 05:19:27.859107 |
Details available
Winston 1.5.4 devices have an SSH user account with access from bastion hosts. This is undocumented in device documents and is not announced to the user.
Published: 2020-10-28T17:20:04.000Z
Updated: 2024-08-04T13:37:54.205Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-16258 |
not_vulnerable | 2026-06-08 05:19:27.858643 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-16257 |
not_vulnerable | 2026-06-08 05:19:27.858286 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-16256 |
not_vulnerable | 2026-06-08 05:19:27.857840 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.