PT-2016-4838 · Lenovo · Shareit

Ivan Huertas · Publicado 2016-01-26 · Atualizado 2018-10-09 · CVE-2016-1492

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Lenovo SHAREit versions prior to 3.5.48 ww

Description The issue concerns the Wifi hotspot feature in Lenovo SHAREit, which does not require a password when configured to receive files. This makes it easier for remote attackers to gain access by being within the WLAN coverage area.

Recommendations For versions prior to 3.5.48 ww, update to version 3.5.48 ww or later to resolve the issue.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2016-1492

Produtos afetados

Shareit

Referências · 7

• http://packetstormsecurity.com/files/135378/Lenovo-ShareIT-Information-Disclosure-Hardcoded-Password.html · Nota
• https://osv.dev/vulnerability/CVE-2016-1492 · Aviso do Fabricante
• http://coresecurity.com/advisories/lenovo-shareit-multiple-vulnerabilities · Nota
• https://support.lenovo.com/us/en/product_security/len_4058 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-1492 · Nota de Segurança
• http://seclists.org/fulldisclosure/2016/Jan/67 · Nota
• http://securityfocus.com/archive/1/537365/100/0/threaded · Nota