CVE-2004-2049
Severity:
Pending analysis
Type:
Unavailable / Other
Publication date:
31/12/2004
Last modified:
11/07/2017
Description
eSeSIX Thintune thin clients running firmware 2.4.38 and earlier store sensitive usernames and passwords in cleartext in configuration files for the keeper library, which allows attackers to gain access.
Impact
Base Score 2.0
4.60
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:h:esesix:thintune_extreme:2.4.38:*:*:*:*:*:*:* | ||
cpe:2.3:h:esesix:thintune_l:2.4.38:*:*:*:*:*:*:* | ||
cpe:2.3:h:esesix:thintune_m:2.4.38:*:*:*:*:*:*:* | ||
cpe:2.3:h:esesix:thintune_mobile:2.4.38:*:*:*:*:*:*:* | ||
cpe:2.3:h:esesix:thintune_s:2.4.38:*:*:*:*:*:*:* | ||
cpe:2.3:h:esesix:thintune_xm:2.4.38:*:*:*:*:*:*:* | ||
cpe:2.3:h:esesix:thintune_xs:2.4.38:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page