High severity8.0NVD Advisory· Published Jan 26, 2016· Updated Jun 17, 2026

CVE-2016-1489

Description

Lenovo SHAREit before 3.2.0 for Windows and SHAREit before 3.5.48_ww for Android transfer files in cleartext, which allows remote attackers to (1) obtain sensitive information by sniffing the network or (2) conduct man-in-the-middle (MITM) attacks via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Lenovo/Shareit3 versions
cpe:2.3:a:lenovo:shareit:*:*:*:*:*:android:*:*+ 2 more
- cpe:2.3:a:lenovo:shareit:*:*:*:*:*:android:*:*range: <=3.0.18_ww
- cpe:2.3:a:lenovo:shareit:*:*:*:*:*:windows:*:*range: <=2.5.1.1
- (no CPE)range: <3.2.0 (Windows) / <3.5.48_ww (Android)

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/135378/Lenovo-ShareIT-Information-Disclosure-Hardcoded-Password.htmlnvdThird Party AdvisoryVDB Entry
seclists.org/fulldisclosure/2016/Jan/67nvdThird Party AdvisoryVDB Entry
www.coresecurity.com/advisories/lenovo-shareit-multiple-vulnerabilitiesnvdVendor Advisory
support.lenovo.com/us/en/product_security/len_4058nvdVendor Advisory
www.securityfocus.com/archive/1/537365/100/0/threadednvd

News mentions

No linked articles in our index yet.

cvss	0.520
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000