Lucene search

K
cvelistMitreCVELIST:CVE-2017-6445
HistoryMar 05, 2017 - 8:00 p.m.

CVE-2017-6445

2017-03-0520:00:00
mitre
www.cve.org

8.1 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.4%

The auto-update feature of Open Embedded Linux Entertainment Center (OpenELEC) 6.0.3, 7.0.1, and 8.0.4 uses neither encrypted connections nor signed updates. A man-in-the-middle attacker could manipulate the update packages to gain root access remotely.

8.1 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.4%

Related for CVELIST:CVE-2017-6445