PT-2016-4838 · Lenovo · Shareit

Ivan Huertas · Published 2016-01-26 · Updated 2018-10-09 · CVE-2016-1492

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Lenovo SHAREit versions prior to 3.5.48 ww

Description The issue concerns the Wifi hotspot feature in Lenovo SHAREit, which does not require a password when configured to receive files. This makes it easier for remote attackers to gain access by being within the WLAN coverage area.

Recommendations For versions prior to 3.5.48 ww, update to version 3.5.48 ww or later to resolve the issue.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2016-1492

Affected Products

Shareit

References · 7

• https://osv.dev/vulnerability/CVE-2016-1492 · Vendor Advisory
• https://support.lenovo.com/us/en/product_security/len_4058 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-1492 · Security Note
• http://packetstormsecurity.com/files/135378/Lenovo-ShareIT-Information-Disclosure-Hardcoded-Password.html · Note
• http://coresecurity.com/advisories/lenovo-shareit-multiple-vulnerabilities · Note
• http://seclists.org/fulldisclosure/2016/Jan/67 · Note
• http://securityfocus.com/archive/1/537365/100/0/threaded · Note