CVE-2016-1491

The Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows, when configured to receive files, has a hardcoded password of 12345678, which makes it easier for remote attackers to obtain access by leveraging a position within the WLAN coverage area.

• CWE-255

• http://packetstormsecurity.com/files/135378/Lenovo-ShareIT-Information-Disclosure-Hardcoded-Password.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2016/Jan/67Third Party Advisory, VDB Entry
• http://www.coresecurity.com/advisories/lenovo-shareit-multiple-vulnerabilitiesThird Party Advisory
• http://www.securityfocus.com/archive/1/537365/100/0/threaded
• https://support.lenovo.com/us/en/product_security/len_4058Mitigation, Vendor Advisory
• http://packetstormsecurity.com/files/135378/Lenovo-ShareIT-Information-Disclosure-Hardcoded-Password.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2016/Jan/67Third Party Advisory, VDB Entry
• http://www.coresecurity.com/advisories/lenovo-shareit-multiple-vulnerabilitiesThird Party Advisory
• http://www.securityfocus.com/archive/1/537365/100/0/threaded
• https://support.lenovo.com/us/en/product_security/len_4058Mitigation, Vendor Advisory

Published

Jan 26, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-1485Cross-site scripting (XSS) vulnerability in Cisco Identity S…
• CVE-2016-1486A vulnerability in the email attachment scanning functionali…
• CVE-2016-1487Lexmark Markvision Enterprise before 2.3.0 misuses the Apach…8.8
• CVE-2016-1488Cross-site scripting (XSS) vulnerability in the login form i…
• CVE-2016-1489Lenovo SHAREit before 3.2.0 for Windows and SHAREit before 3…
• CVE-2016-1490The Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows …
• CVE-2016-1492The Wifi hotspot in Lenovo SHAREit before 3.5.48_ww for Andr…
• CVE-2016-1493Intel Driver Update Utility before 2.4 retrieves driver upda…
• CVE-2016-1494The verify function in the RSA package for Python (Python-RS…
• CVE-2016-1495Integer overflow in the graphics drivers in Huawei Mate S sm…
• CVE-2016-1496The graphics driver in Huawei P8 smartphones with software G…
• CVE-2016-1497The Configuration utility in F5 BIG-IP systems 11.0.x, 11.1.…