Vulnerabilities

TI-2017-04246 CVE-2017-6445 · GHSA-9rcx-w9pg-pvf5

The auto-update feature of Open Embedded Linux Entertainment Center (OpenELEC) 6.0.3…

LOW 37

The auto-update feature of Open Embedded Linux Entertainment Center (OpenELEC) 6.0.3, 7.0.1, and 8.0.4 uses neither encrypted connections nor signed updates.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.00995 Published 2017-03-05 No fix listed CWE-311

TI-2016-02033 CVE-2016-2230 · GHSA-jm9p-h6fm-3f6g

OpenELEC and RasPlex devices have a hardcoded password for the root account, which makes…

MEDIUM 48

OpenELEC and RasPlex devices have a hardcoded password for the root account, which makes it easier for remote attackers to obtain access via an SSH session.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03572 Published 2016-02-08 No fix listed CWE-255

TI-2008-05721 CVE-2008-6025 · GHSA-f76r-jqp9-73vv

Directory traversal vulnerability in scr/form.php in openElec 3.01 and earlier allows…

LOW 34

Directory traversal vulnerability in scr/form.php in openElec 3.01 and earlier allows remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01904 Published 2009-02-03 No fix listed CWE-22

Vulnerabilities

Filters

The auto-update feature of Open Embedded Linux Entertainment Center (OpenELEC) 6.0.3…

OpenELEC and RasPlex devices have a hardcoded password for the root account, which makes…

Directory traversal vulnerability in scr/form.php in openElec 3.01 and earlier allows…