GCVE-110-CERTCC-2015-544527

Advisory PublishedCVSS 10.0/10

Vulnetix · Advisory published February 2, 2016

OpenELEC and derivatives utilize a hard-coded default root password, and enable SSH root access by default.

Download JSON Open in Console

Risk Scores

CVSS 2.0

10.0/10

Critical · AV:N/AC:L/Au:N/C:C/I:C/A:C

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact2d1_population2d1_direct_report1

certcc-cvss-temporal-env

temporal_score8.5remediation_levelUreport_confidenceURenvironmental_score2.1363232464target_distributionLenvironmental_vectorCDP:ND/TD:L/CR:ND/IR:ND/AR:ND

References

OpenELEC and RasPlex have a hard-coded SSH root password

url

OpenELEC and RasPlex have a hard-coded SSH root password

url

OpenELEC and RasPlex have a hard-coded SSH root password

url

OpenELEC and RasPlex have a hard-coded SSH root password

advisory

OpenELEC and RasPlex have a hard-coded SSH root password

discussion

Browse GCVE Records

72,580 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON