https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2004-2050.htmlhttps://patchthecve.com/cve/CVE-2004-2050.htmlTue, 16 Jun 2026 22:08:54 +0000MEDIUM 4.6: eSeSIX Thintune thin clients running firmware 2.4.38 and earlier allow local users to gain privileges by pressing CTRL-SHIFT-ALT-DEL and entering the "maertsJ" password, which is hard-coded into lshell.https://patchthecve.com/cve/CVE-2004-2049.htmlhttps://patchthecve.com/cve/CVE-2004-2049.htmlTue, 16 Jun 2026 22:08:54 +0000MEDIUM 4.6: eSeSIX Thintune thin clients running firmware 2.4.38 and earlier store sensitive usernames and passwords in cleartext in configuration files for the keeper library, which allows attackers to gain access.https://patchthecve.com/cve/CVE-2004-2048.htmlhttps://patchthecve.com/cve/CVE-2004-2048.htmlTue, 16 Jun 2026 22:08:53 +0000HIGH 10.0: radmin in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier starts a process port 25072 that can be accessed with a default "jstwo" password, which allows remote attackers to gain access.https://patchthecve.com/cve/CVE-2004-2051.htmlhttps://patchthecve.com/cve/CVE-2004-2051.htmlTue, 16 Jun 2026 22:08:54 +0000MEDIUM 5.0: The Phoenix browser in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier allows local users to read arbitrary files via a file:/// URL.