Winston 1.5.4 devices allow a U-Boot interrupt, resulting in local root access.
winstonprivacy winston firmware 1.5.4