CVE-2020-16258

Winston 1.5.4 devices make use of a Monit service not managed during the normal user process which is configured with default credentials...

CVE-2020-16262

Winston 1.5.4 devices have a local www-data user that is overly permissioned, resulting in root privilege escalation...