Lucene search
HistoryMay 10, 2005 - 4:00 a.m.
CVE-2004-2048
cve-2004-2048
radmin
esesix thintune
thin clients
firmware
vulnerability
remote access
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7 High
AI Score
Confidence
Low
0.014 Low
EPSS
Percentile
86.7%
radmin in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier starts a process port 25072 that can be accessed with a default “jstwo” password, which allows remote attackers to gain access.
Affected configurations
Node
esesixthintune_extremeMatch2.4.38
OResesixthintune_lMatch2.4.38
OResesixthintune_mMatch2.4.38
OResesixthintune_mobileMatch2.4.38
OResesixthintune_sMatch2.4.38
OResesixthintune_xmMatch2.4.38
OResesixthintune_xsMatch2.4.38
Related
cvelist
cvelist
CVE-2004-2048
2005-05-10 04:00:00
nvd
nvd
CVE-2004-2048
2004-12-31 05:00:00
openvas
openvas
eSeSIX Thintune Thin Client Multiple Vulnerabilities
2005-11-03 00:00:00
eSeSIX Thintune Thin Client Multiple Vulnerabilities
2005-11-03 00:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7 High
AI Score
Confidence
Low
0.014 Low
EPSS
Percentile
86.7%
Related for CVE-2004-2048