CVE-2004-2048 radmin in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier starts a process port 25072 that can be accessed with a default "jstwo" password, which allows remote attackers to gain acces...
HighCVSS 10.0
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
radmin in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier starts a process port 25072 that can be accessed with a default "jstwo" password, which allows remote attackers to gain access.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| esesix thintune extreme | = 2.4.38 | No fix listed |
| esesix thintune l | = 2.4.38 | No fix listed |
| esesix thintune m | = 2.4.38 | No fix listed |
| esesix thintune mobile | = 2.4.38 | No fix listed |
| esesix thintune s | = 2.4.38 | No fix listed |
| esesix thintune xm | = 2.4.38 | No fix listed |
| esesix thintune xs | = 2.4.38 | No fix listed |
References
- 20040724 eSeSIX Thintune thin client multiple vulnerabilities mailing-list
- 12154 third-party-advisory
- 1010770 vdb-entry
- 8246 vdb-entry
- 10794 exploit vdb-entry
- thintune-password-gain-access(16790) vdb-entry