Approved changes feed: RSS · Atom

cpe:2.3:h:esesix:thintune_l:2.4.38:*:*:*:*:*:*:*

part: h version: 2.4.38 update: *

VendorEsesix (8d9235fa-d35d-5494-a9a5-6ec2a9c3345b)
ProductThintune L (5025070f-e51c-5e05-9d64-ec6d2ca05161)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2004-2050 vulnerable 2026-06-08 04:48:08.401673 Details available
eSeSIX Thintune thin clients running firmware 2.4.38 and earlier allow local users to gain privileges by pressing CTRL-SHIFT-ALT-DEL and entering the "maertsJ" password, which is hard-coded into lshell.
Published: 2005-05-10T04:00:00.000Z
Updated: 2024-08-08T01:15:01.434Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2049 vulnerable 2026-06-08 04:48:08.401095 Details available
eSeSIX Thintune thin clients running firmware 2.4.38 and earlier store sensitive usernames and passwords in cleartext in configuration files for the keeper library, which allows attackers to gain access.
Published: 2005-05-10T04:00:00.000Z
Updated: 2024-08-08T01:15:01.208Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2048 vulnerable 2026-06-08 04:48:08.397573 Details available
radmin in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier starts a process port 25072 that can be accessed with a default "jstwo" password, which allows remote attackers to gain access.
Published: 2005-05-10T04:00:00.000Z
Updated: 2024-08-08T01:15:01.368Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.