118 matches found
CVE-2016-1492
The Wifi hotspot in Lenovo SHAREit before 3.5.48ww for Android, when configured to receive files, does not require a password, which makes it easier for remote attackers to obtain access by leveraging a position within the WLAN coverage area...
CVE-2016-1489
CVE-2016-1489 affects Lenovo SHAREit for Windows (before 3.2.0) and Android (before 3.5.48_ww); files transferred over HTTP are in cleartext, enabling an attacker to sniff traffic or perform MITM attacks. CoreLabs and Lenovo advisories note related flaws (hard-coded password and unencrypted trans...
CVE-2016-1491
The Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows, when configured to receive files, has a hardcoded password of 12345678, which makes it easier for remote attackers to obtain access by leveraging a position within the WLAN coverage area...
CVE-2016-1491
Summary of CVE-2016-1491 (Lenovo SHAREit) : CoreLabs’ advisory confirms a hard-coded password vulnerability in Lenovo SHAREit for Windows prior to version 3.2.0 where a Wi‑Fi hotspot is created to receive files using the fixed password “12345678,” enabling a remote attacker within WLAN range to g...
CVE-2016-1490
CVE-2016-1490 is part of Lenovo SHAREit vulnerabilities reported by Core Security (CORE-2016-0002). It describes information disclosure on Windows SHAREit when the Wi‑Fi hotspot is active with the default password 12345678. An attacker within range could remotely browse file names by issuing an H...
CVE-2016-1492: Improper Access Control
The Wifi hotspot in Lenovo SHAREit before 3.5.48ww for Android, when configured to receive files, does not require a password, which makes it easier for remote attackers to obtain access by leveraging a position within the WLAN coverage area...
CVE-2016-1491: Undefined Security Weakness
The Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows, when configured to receive files, has a hardcoded password of 12345678, which makes it easier for remote attackers to obtain access by leveraging a position within the WLAN coverage area...
PT-2016-4837
Name of the Vulnerable Software and Affected Versions Lenovo SHAREit versions prior to 3.2.0 Description The issue concerns a hardcoded password in the Wifi hotspot feature of Lenovo SHAREit. When configured to receive files, the hardcoded password 12345678 can be exploited by remote attackers...
PT-2016-4838
Name of the Vulnerable Software and Affected Versions Lenovo SHAREit versions prior to 3.5.48 ww Description The issue concerns the Wifi hotspot feature in Lenovo SHAREit, which does not require a password when configured to receive files. This makes it easier for remote attackers to gain access ...
CVE-2016-1489: Exposure of Sensitive Information to an Unauthorized Actor
Lenovo SHAREit before 3.2.0 for Windows and SHAREit before 3.5.48ww for Android transfer files in cleartext, which allows remote attackers to 1 obtain sensitive information by sniffing the network or 2 conduct man-in-the-middle MITM attacks via unspecified vectors...
CVE-2016-1490: Exposure of Sensitive Information to an Unauthorized Actor
The Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows allows remote attackers to obtain sensitive file names via a crafted file request to /list...
PT-2016-4835
Name of the Vulnerable Software and Affected Versions Lenovo SHAREit versions prior to 3.2.0 for Windows Lenovo SHAREit versions prior to 3.5.48 ww for Android Description The issue allows remote attackers to obtain sensitive information or conduct man-in-the-middle attacks. This is possible...
PT-2016-4836
Name of the Vulnerable Software and Affected Versions Lenovo SHAREit versions prior to 3.2.0 Description The issue allows remote attackers to obtain sensitive file names via a crafted file request to the "/list" API endpoint. Recommendations For versions prior to 3.2.0, update to version 3.2.0 or...
Lenovo SHAREit App Hard-Coded Password
Lenovo today has patched a number of vulnerabilities that jeopardize private data, which are largely enabled by a simple hard-coded password in a freely available file-sharing application. The flaws were found in in the Lenovo ShareIT application for Android and Windows by researchers at Core...
Lenovo ShareIT Multiple Vulnerabilities
Advisory ID Internal CORE-2016-0002 1. Advisory Information Title: Lenovo ShareIT Multiple Vulnerabilities Advisory ID: CORE-2016-0002 Date published: 2016-01-25 Date of last update: 2016-01-22 Vendors contacted: Lenovo Release mode: Coordinated release 2. Vulnerability Information Class: Use of...
Lenovo ShareIT Information Disclosure / Hardcoded Password
Advisory Information Title: Lenovo ShareIT Multiple Vulnerabilities Advisory ID: CORE-2016-0002 Advisory URL: http://www.coresecurity.com/advisories/lenovo-shareit-multiple-vulnerabilities Date published: 2016-01-25 Date of last update: 2016-01-22 Vendors contacted: Lenovo Release mode:...