Winston Privacy Version 1.5.4
bishopfox.com | blog | #advisory | #vpn | #csrf | #command-injection | #default-credentials | #iot-security | #winston-privacy
Summary
Nine vulnerabilities in the Winston Privacy device 1.5.4 — critical unauthenticated command injection, CSRF, CORS issues, default credentials, undocumented SSH — fixed in 1.5.8.
- Published
- Collected
Skip to content