Openelec

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Openelec records in CISA KEV

No Openelec vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Openelec 3 records MEDIUM

Records

3 records

TI-2016-02033 CVE-2016-2230 · GHSA-jm9p-h6fm-3f6g

OpenELEC and RasPlex devices have a hardcoded password for the root account, which makes…

MEDIUM 48

OpenELEC and RasPlex devices have a hardcoded password for the root account, which makes it easier for remote attackers to obtain access via an SSH session.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03572 Published 2016-02-08 No fix listed CWE-255

TI-2017-04246 CVE-2017-6445 · GHSA-9rcx-w9pg-pvf5

The auto-update feature of Open Embedded Linux Entertainment Center (OpenELEC) 6.0.3…

LOW 37

The auto-update feature of Open Embedded Linux Entertainment Center (OpenELEC) 6.0.3, 7.0.1, and 8.0.4 uses neither encrypted connections nor signed updates.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.00995 Published 2017-03-05 No fix listed CWE-311

TI-2008-05721 CVE-2008-6025 · GHSA-f76r-jqp9-73vv

Directory traversal vulnerability in scr/form.php in openElec 3.01 and earlier allows…

LOW 34

Directory traversal vulnerability in scr/form.php in openElec 3.01 and earlier allows remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01904 Published 2009-02-03 No fix listed CWE-22

Open these records in search →

Critical	1
High	1
Medium	1
Low	0
No CVSS	0