CVE Catalog

CVE-2016-2230

Critical
Published: Translated: NVD NIST

Summary

OpenELEC and RasPlex devices have a hardcoded password for the root account, making it easier for remote attackers to gain access via an SSH session.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the system, posing a serious threat to data security.

Recommendation

It is recommended to change the default password for the root account and implement additional security measures for SSH access.

Original NVD description (English source)

OpenELEC and RasPlex devices have a hardcoded password for the root account, which makes it easier for remote attackers to obtain access via an SSH session.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS