CVE-2016-1492

概要

参考情報

• packetstormsecurity.com/files/135378/Lenovo-ShareIT-Information-Disclosure-Hardcoded-Password.html · Third Party Advisory
• seclists.org/fulldisclosure/2016/Jan/67 · Third Party Advisory
• coresecurity.com/advisories/lenovo-shareit-multiple-vulnerabilities · Third Party Advisory
• securityfocus.com/archive/1/537365/100/0/threaded
• support.lenovo.com/us/en/product_security/len_4058 · Mitigation

shareit のその他の脆弱性

• CVE-2016-4783中 6.1Cross-site scripting (XSS) vulnerability in Lenovo SHAREit before 3.5.98_ww on Android before 4.4 allows remote attackers to inject arbitrar…
• CVE-2016-4782高 8.8Lenovo SHAREit before 3.5.98_ww on Android before 4.2 allows remote attackers to have unspecified impact via a crafted intent: URL, aka an "…
• CVE-2016-1491高 8.8The Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows, when configured to receive files, has a hardcoded password of 12345678, which m…
• CVE-2016-1490中 4.1The Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows allows remote attackers to obtain sensitive file names via a crafted file reques…
• CVE-2016-1489高 8.0Lenovo SHAREit before 3.2.0 for Windows and SHAREit before 3.5.48_ww for Android transfer files in cleartext, which allows remote attackers …