4 matches found
CVE-2020-16257
Winston 1.5.4 devices are vulnerable to command injection via the API...
10CVSS7.5AI score0.03695EPSS
SaveExploits1
CVE-2020-16257
Winston 1.5.4 devices are vulnerable to command injection via the API...
9.8CVSS7.3AI score0.03695EPSS
SaveExploits1References2
CVE-2020-16257
Winston 1.5.4 devices are vulnerable to command injection via the API...
10CVSS9.8AI score0.03695EPSS
SaveExploits1References2
CVE-2020-16257
The CVE relates to Winston 1.5.4 devices, where the API is vulnerable to command injection. The issue is driven by a vulnerability in the API surface that allows remote command execution, with CVSSv3 scores indicating high impact (Base 9.8) across confidentiality, integrity, and availability. Con...
10CVSS9.7AI score0.03695EPSS
SaveExploits1References2Affected Software1
20