PT-2020-14852

CVE-2020-16261

Published

2020-10-28

Updated

2021-07-21

CVSS 2.0

7.2

High

MetricsAV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Winston version 1.5.4

Description The issue allows for a U-Boot interrupt, which can result in local root access.

Recommendations For version 1.5.4, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾