PT-2016-4835 · Lenovo · Shareit

Ivan Huertas · Publicado 2016-01-26 · Atualizado 2018-10-09 · CVE-2016-1489

Positive Technologies (AI Summary)

CVSS v3.1

8.0

Alta

Vetor base

AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Lenovo SHAREit versions prior to 3.2.0 for Windows Lenovo SHAREit versions prior to 3.5.48 ww for Android

Description The issue allows remote attackers to obtain sensitive information or conduct man-in-the-middle attacks. This is possible because files are transferred in cleartext, making it easier for attackers to intercept data by sniffing the network or via unspecified vectors.

Recommendations For Windows versions prior to 3.2.0, update to version 3.2.0 or later to resolve the issue. For Android versions prior to 3.5.48 ww, update to version 3.5.48 ww or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-254

CWE-200

Identificadores relacionados

CVE-2016-1489

Produtos afetados

Shareit

Referências · 7

• http://packetstormsecurity.com/files/135378/Lenovo-ShareIT-Information-Disclosure-Hardcoded-Password.html · Nota
• https://osv.dev/vulnerability/CVE-2016-1489 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-1489 · Nota de Segurança
• https://support.lenovo.com/us/en/product_security/len_4058 · Aviso do Fabricante
• http://seclists.org/fulldisclosure/2016/Jan/67 · Nota
• http://securityfocus.com/archive/1/537365/100/0/threaded · Nota
• http://coresecurity.com/advisories/lenovo-shareit-multiple-vulnerabilities · Aviso do Fabricante