CVE-2020-16259

Publication date

2020-10-28 17:20:04

Family

mitre

State

PUBLISHED

Description

Winston 1.5.4 devices have an SSH user account with access from bastion hosts. This is undocumented in device documents and is not announced to the user.