EUVD-2016-3314

Malware in sbrugna...

The vulnerability of the OpenELEC operating system and the RasPlex distribution, which stems from the use of pre-installed user data, allows a perpetrator to gain access to the device.

The vulnerability of the OpenELEC operating system and the RasPlex distribution is related to the use of a pre-installed root account. Exploiting this vulnerability allows an attacker, operating remotely, to gain access to the device using the SSH protocol...

OpenELEC and RasPlex Privilege Acquisition Vulnerability

OpenELEC is a Linux embedded operating system that comes with a home theater.RASPLEX is an open, standalone home entertainment system. A security vulnerability exists in OpenELEC and RasPlex that can be exploited by remote attackers to gain access with the help of an SSH session...

Rasplex Default Credentials (SSH)

Rasplex is using known default credentials. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-2230

OpenELEC and RasPlex devices have a hardcoded password for the root account, which makes it easier for remote attackers to obtain access via an SSH session...

Hardcoded credentials

OpenELEC and RasPlex devices have a hardcoded password for the root account, which makes it easier for remote attackers to obtain access via an SSH session...

CVE-2016-2230

CVE-2016-2230 affects OpenELEC and RasPlex, where the root account has a hardcoded password. This enables remote attackers to access via SSH with high impact (C, I, A likely affected) as indicated by the CVSS metrics in the records. Connected sources corroborate the existence of default credentia...

CVE-2016-2230

OpenELEC and RasPlex devices have a hardcoded password for the root account, which makes it easier for remote attackers to obtain access via an SSH session...

OpenELEC and RasPlex have a hard-coded SSH root password

Overview OpenELEC and derivatives utilize a hard-coded default root password, and enable SSH root access by default. Description CWE-259: Use of Hard-coded Password OpenELEC has a hard-coded root password. The root partition is by default read-only, preventing a user from changing the password on...