« Volver al listado

CVE-2004-2048

Estado: ModificadaAlta (10)—

radmin in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier starts a process port 25072 that can be accessed with a default "jstwo" password, which allows remote attackers to gain access.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (7)

Esesix — Thintune ExtremeEsesix — Thintune LEsesix — Thintune MEsesix — Thintune MobileEsesix — Thintune SEsesix — Thintune XMEsesix — Thintune XS

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2004-2048",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2004-12-31T05:00:00.000",
  "references": [
    {
      "url": "http://marc.info/?l=bugtraq&m=109068491801021&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/12154",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1010770",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/8246",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/10794",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16790",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=109068491801021&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/12154",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1010770",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/8246",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/10794",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16790",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "radmin in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier starts a process port 25072 that can be accessed with a default \"jstwo\" password, which allows remote attackers to gain access."
    }
  ],
  "lastModified": "2026-06-16T22:08:53.907",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:esesix:thintune_extreme:2.4.38:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "99504BBD-2057-4EAD-8347-96216B3EEDCA"
            },
            {
              "criteria": "cpe:2.3:h:esesix:thintune_l:2.4.38:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A96E308D-2610-4B0B-B4E3-16AF3E4C91E8"
            },
            {
              "criteria": "cpe:2.3:h:esesix:thintune_m:2.4.38:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B63C47F9-CD0E-4B2A-8A4A-9DF5DACF51C4"
            },
            {
              "criteria": "cpe:2.3:h:esesix:thintune_mobile:2.4.38:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B099B881-ED9D-4275-B870-DC8404EA397F"
            },
            {
              "criteria": "cpe:2.3:h:esesix:thintune_s:2.4.38:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "52D22936-D5EE-4588-9EE0-F1B628F951F8"
            },
            {
              "criteria": "cpe:2.3:h:esesix:thintune_xm:2.4.38:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5313BBF6-89A0-48C4-9A4D-8601173201A1"
            },
            {
              "criteria": "cpe:2.3:h:esesix:thintune_xs:2.4.38:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0D79A571-BD13-4045-AFEF-90412D13F1A9"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}