Flaws in Winston Privacy Devices Can Expose Networks to Remote Attacks

guest · Oct 29, 2020

Flaws in Winston Privacy Devices Can Expose Networks to Remote Attacks
October 27, 2020
https://www.securityweek.com/flaws-winston-privacy-devices-can-expose-networks-remote-attacks

Winston Privacy provides a hardware-based service designed to boost online privacy and security. The company says it can block online surveillance, accelerate browsing, and block ads and trackers, and it also advertises its services as an alternative to traditional VPNs.

A consultant at offensive security testing company Bishop Fox and an independent researcher discovered a total of 9 vulnerabilities in the device provided by Winston Privacy to customers. Many of the flaws have been assigned a severity rating of critical or high.
They can be exploited for arbitrary code execution, privilege escalation, changing device settings and launching DoS attacks.
Click to expand...

The vulnerabilities were reported to Winston Privacy in July and the vendor told SecurityWeek that it released a critcal hotfix within 24 hours. Patches were then gradually rolled out through last week, when version 1.5.8 was released to patch a remaining minor issue. Firmware updates containing the patches are automatically sent to devices and users do not need to take any action.

Bishop Fox has published an advisory with technical details for each of the identified vulnerabilities.
Click to expand...

Log in or Sign up

Flaws in Winston Privacy Devices Can Expose Networks to Remote Attacks

guest Guest

Log in or Sign up

Flaws in Winston Privacy Devices Can Expose Networks to Remote Attacks

guest Guest

Useful Searches