CVE-2004-2048: radmin in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier starts a process port 25072 that...

Security readout for executives and security teams

Some eSeSIX Thintune thin clients reportedly start a remote administration service protected by a known default password. If these legacy devices are still deployed and reachable, an attacker could gain access without needing a unique stolen credential. Exposure is likely limited to organizations still operating eSeSIX Thintune thin clients on firmware 2.4.38 or earlier, especially where the remote administration service is reachable from user networks, partner networks, or the internet. Prioritize remediation if these thin clients remain in production or are reachable outside a tightly controlled management network. If the product is retired, close the finding by documenting absence or decommissioning evidence. Mitigation focus: Inventory eSeSIX Thintune thin clients and confirm firmware versions.; Check vendor or maintainer guidance for supported firmware updates or retirement advice.; Change default credentials where the administration interface supports it..

Prepared

Jun 29, 2026, 20:58 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.