CVE-2016-1489

High

Published: 26/01/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Lenovo SHAREit before 3.2.0 for Windows and before 3.5.48_ww for Android transfers files in cleartext, allowing remote attackers to obtain sensitive information by sniffing the network or conduct man-in-the-middle attacks.

Risk Assessment

Organizations may be exposed to data theft and other attacks that could lead to a loss of confidentiality.

Recommendation

It is recommended to update the SHAREit application to the latest version to ensure encryption of transmitted data and minimize the risk of attacks.

Other vulnerabilities in Lenovo SHAREit

CVE-2016-4782High
Lenovo SHAREit before 3.5.98_ww on Android before 4.2 allows remote attackers to conduct an attack via a crafted intent scheme URL.

Original NVD description (English source)

Lenovo SHAREit before 3.2.0 for Windows and SHAREit before 3.5.48_ww for Android transfer files in cleartext, which allows remote attackers to (1) obtain sensitive information by sniffing the network or (2) conduct man-in-the-middle (MITM) attacks via unspecified vectors.