Description
OpenELEC and RasPlex devices have a hardcoded password for the root account, which makes it easier for remote attackers to obtain access via an SSH session.
References
- https://github.com/RasPlex/RasPlex/issues/453
- VU#544527 third-party-advisory