← Back

Esesix

esesix

5 CVEs • 8 products

Products (8)

Click to collapse
Toggle
Thintune L
thintune_l
Thintune M
thintune_m
Thintune S
thintune_s
Thintune Xm
thintune_xm
Thintune Xs
thintune_xs
Thintune
thintune

CVEs (5)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Esesix
1Thintune
Apr 16, 2026
Dec 31, 2004
N/A· v4
N/A· v3
7.5 HIGH· v2
eSeSIX Thintune thin clients running firmware 2.4.38 and earlier accept any password that begins with the actual password, which makes it easier for users to conduct brute force password guessing.
1Esesix
7Thintune Extreme
Thintune LThintune M+4 more
Apr 16, 2026
Dec 31, 2004
N/A· v4
N/A· v3
4.6 MEDIUM· v2
eSeSIX Thintune thin clients running firmware 2.4.38 and earlier allow local users to gain privileges by pressing CTRL-SHIFT-ALT-DEL and entering the "maertsJ" password, which is hard-coded into lshell.
1Esesix
7Thintune Extreme
Thintune LThintune M+4 more
Apr 16, 2026
Dec 31, 2004
N/A· v4
N/A· v3
4.6 MEDIUM· v2
eSeSIX Thintune thin clients running firmware 2.4.38 and earlier store sensitive usernames and passwords in cleartext in configuration files for the keeper library, which allows attackers to gain access.
1Esesix
7Thintune Extreme
Thintune LThintune M+4 more
Apr 16, 2026
Dec 31, 2004
N/A· v4
N/A· v3
10.0 HIGH· v2
radmin in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier starts a process port 25072 that can be accessed with a default "jstwo" password, which allows remote attackers to gain access.
1Esesix
7Thintune Extreme
Thintune LThintune M+4 more
Apr 16, 2026
Jul 24, 2004
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The Phoenix browser in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier allows local users to read arbitrary files via a file:/// URL.