Winston 1.5.4 devices allow a U-Boot interrupt, resulting in local root access.
winstonprivacy winston_firmware 1.5.4