| Max CVSS | 7.6 | Min CVSS | 7.6 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-6445 | 7.6 |
The auto-update feature of Open Embedded Linux Entertainment Center (OpenELEC) 6.0.3, 7.0.1, and 8.0.4 uses neither encrypted connections nor signed updates. A man-in-the-middle attacker could manipulate the update packages to gain root access remote
|
03-10-2019 - 00:03 | 05-03-2017 - 20:59 |