9.3
CVSSv2

CVE-2020-16256

Published: 28/10/2020 Updated: 03/11/2020
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 828
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

The API on Winston 1.5.4 devices is vulnerable to CSRF.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

winstonprivacy winston firmware 1.5.4