Vulnerabilities > Lenovo > Shareit > 2.5.1.1

DATE CVE VULNERABILITY TITLE RISK
2016-01-26 CVE-2016-1491 Credentials Management vulnerability in Lenovo Shareit 2.5.1.1
The Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows, when configured to receive files, has a hardcoded password of 12345678, which makes it easier for remote attackers to obtain access by leveraging a position within the WLAN coverage area.
5.4
2016-01-26 CVE-2016-1490 Information Exposure vulnerability in Lenovo Shareit 2.5.1.1
The Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows allows remote attackers to obtain sensitive file names via a crafted file request to /list.
low complexity
lenovo CWE-200
2.7
2016-01-26 CVE-2016-1489 Information Exposure vulnerability in Lenovo Shareit 2.5.1.1/3.0.18Ww
Lenovo SHAREit before 3.2.0 for Windows and SHAREit before 3.5.48_ww for Android transfer files in cleartext, which allows remote attackers to (1) obtain sensitive information by sniffing the network or (2) conduct man-in-the-middle (MITM) attacks via unspecified vectors.
4.3