PatchTheCVEopenelec vulnerabilities and fixes
Recent CVEs affecting openelec, with upgrade or downgrade steps. 2 tracked.
openelec has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-03-05. Highest priority: CVE-2016-2230 (score 62/100).
- CVE-2017-6445 HIGH 8.1 MITIGATE The auto-update feature of Open Embedded Linux Entertainment Center (OpenELEC) 6.0.3, 7.0.1, and 8.0.4 uses ne
- CVE-2016-2230 CRITICAL 9.8 MITIGATE OpenELEC and RasPlex devices have a hardcoded password for the root account, which makes it easier for remote
FAQ
How do I fix openelec vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is openelec being exploited right now?
None of the tracked openelec CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which openelec CVE should I patch first?
CVE-2016-2230 currently ranks highest (62/100): OpenELEC and RasPlex devices have a hardcoded password for the root account, which makes it easier for remote .