CVE-2016-1489

Lenovo SHAREit before 3.2.0 for Windows and SHAREit before 3.5.48_ww for Android transfer files in cleartext, which allows remote attackers to (1) obtain sensitive information by sniffing the network or (2) conduct man-in-the-middle (MITM) attacks via unspecified vectors.

• CWE-200
• CWE-254

• http://packetstormsecurity.com/files/135378/Lenovo-ShareIT-Information-Disclosure-Hardcoded-Password.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2016/Jan/67Third Party Advisory, VDB Entry
• http://www.coresecurity.com/advisories/lenovo-shareit-multiple-vulnerabilitiesVendor Advisory
• http://www.securityfocus.com/archive/1/537365/100/0/threaded
• https://support.lenovo.com/us/en/product_security/len_4058Vendor Advisory
• http://packetstormsecurity.com/files/135378/Lenovo-ShareIT-Information-Disclosure-Hardcoded-Password.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2016/Jan/67Third Party Advisory, VDB Entry
• http://www.coresecurity.com/advisories/lenovo-shareit-multiple-vulnerabilitiesVendor Advisory
• http://www.securityfocus.com/archive/1/537365/100/0/threaded
• https://support.lenovo.com/us/en/product_security/len_4058Vendor Advisory

Published

Jan 26, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-1483Cisco WebEx Meetings Server 2.6 allows remote attackers to c…
• CVE-2016-1484Cisco WebEx Meetings Server 2.6 allows remote attackers to b…
• CVE-2016-1485Cross-site scripting (XSS) vulnerability in Cisco Identity S…
• CVE-2016-1486A vulnerability in the email attachment scanning functionali…
• CVE-2016-1487Lexmark Markvision Enterprise before 2.3.0 misuses the Apach…8.8
• CVE-2016-1488Cross-site scripting (XSS) vulnerability in the login form i…
• CVE-2016-1490The Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows …
• CVE-2016-1491The Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows,…
• CVE-2016-1492The Wifi hotspot in Lenovo SHAREit before 3.5.48_ww for Andr…
• CVE-2016-1493Intel Driver Update Utility before 2.4 retrieves driver upda…
• CVE-2016-1494The verify function in the RSA package for Python (Python-RS…
• CVE-2016-1495Integer overflow in the graphics drivers in Huawei Mate S sm…