CVE-2020-16260

CVE-2020-16260 describes an authorization bypass vulnerability in Winston 1.5.4 devices, affecting both the winstonprivacy winston software and firmware. This flaw allows an attacker on the intranet to gain unauthorized access, and could potentially be chained with other vulnerabilities for remote exploitation. With a CVSS score of 7.5 (HIGH), it presents a significant risk due to its network-based attack vector, low attack complexity, and high impact on integrity. While there is no evidence of active exploitation, public exploit code, or significant community discussion, organizations should still address this vulnerability given its potential for unauthorized access.