PT-2020-14850

Name of the Vulnerable Software and Affected Versions Winston version 1.5.4 Description The issue concerns an undocumented SSH user account in Winston devices, which allows access from bastion hosts. This account is not mentioned in device documentation and its existence is not disclosed to users...