CVE-2020-16258

Name of the Vulnerable Software and Affected Versions Winston version 1.5.4

Description The issue concerns the use of a Monit service in Winston devices, which is configured with default credentials and not managed during the normal user process.

Recommendations For Winston version 1.5.4, consider changing the default credentials of the Monit service to prevent unauthorized access. As a temporary workaround, restrict access to the Monit service until a more permanent solution is available.