CVEvulnerability

CVE-2004-2048

10.0 HIGH Published 2004-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

radmin in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier starts a process port 25072 that can be accessed with a default "jstwo" password, which allows remote attackers to gain access.

Affected configurations

• esesix thintune extreme 2.4.38 • esesix thintune l 2.4.38 • esesix thintune m 2.4.38 • esesix thintune mobile 2.4.38 • esesix thintune s 2.4.38 • esesix thintune xm 2.4.38 • esesix thintune xs 2.4.38

References