CVE-2004-2049: Esesix Thintune Extreme

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

eSeSIX Thintune thin clients running firmware 2.4.38 and earlier store sensitive usernames and passwords in cleartext in configuration files for the keeper library, which allows attackers to gain access.

Affected products

• Esesix Thintune Extreme: version 2.4.38 only
• Esesix Thintune L: version 2.4.38 only
• Esesix Thintune M: version 2.4.38 only
• Esesix Thintune Mobile: version 2.4.38 only
• Esesix Thintune S: version 2.4.38 only
• Esesix Thintune Xm: version 2.4.38 only
• Esesix Thintune Xs: version 2.4.38 only

Published 2004-12-31. Last modified 2026-06-16.