CVE-2017-6445

HIGH · CVSS 8.1 EPSS 1.00%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-03-05 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2017-6445

Severity

HIGH

CVSS

8.1

EPSS

1.00%

Linux

Original Filing — NVD Description

The auto-update feature of Open Embedded Linux Entertainment Center (OpenELEC) 6.0.3, 7.0.1, and 8.0.4 uses neither encrypted connections nor signed updates. A man-in-the-middle attacker could manipulate the update packages to gain root access remotely.