Lenovo Shareit vulnerabilities

7 CVEs affecting Lenovo Shareit, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-4783, published 2016-05-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-1491, published 2016-01-26. High severity, CVSS 8.8. EPSS: 2.5% chance of exploitation in the next 30 days. The Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows, when configured to receive files, has a hardcoded password of 12345678, which makes it easier for remote attackers to obtain access by…
CVE-2016-4782, published 2016-05-23. High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days. Lenovo SHAREit before 3.5.98_ww on Android before 4.2 allows remote attackers to have unspecified impact via a crafted intent: URL, aka an "intent scheme URL attack."
CVE-2016-1489, published 2016-01-26. High severity, CVSS 8.0. EPSS: 1.8% chance of exploitation in the next 30 days. Lenovo SHAREit before 3.2.0 for Windows and SHAREit before 3.5.48_ww for Android transfer files in cleartext, which allows remote attackers to (1) obtain sensitive information by sniffing the network…
CVE-2016-1492, published 2016-01-26. Medium severity, CVSS 6.1. EPSS: 1.8% chance of exploitation in the next 30 days. The Wifi hotspot in Lenovo SHAREit before 3.5.48_ww for Android, when configured to receive files, does not require a password, which makes it easier for remote attackers to obtain access by…
CVE-2016-1490, published 2016-01-26. Medium severity, CVSS 4.1. EPSS: 1.7% chance of exploitation in the next 30 days. The Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows allows remote attackers to obtain sensitive file names via a crafted file request to /list.
CVE-2014-1939, published 2014-03-03. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. java/android/webkit/BrowserFrame.java in Android before 4.4 uses the addJavascriptInterface API in conjunction with creating an object of the SearchBoxImpl class, which allows attackers to execute…
CVE-2016-4783, published 2016-05-23. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Lenovo SHAREit before 3.5.98_ww on Android before 4.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka…