CVE-2019-9939 Information
Feb 14, 2021
cve
Description
The SHAREit application before 4.0.36 for Android allows a remote attacker (on the same network or joining public \open\ Wi-Fi hotspots created by the application when file transfer is initiated) to bypass authentication by trying to fetch a non-existing page. When the non-existing page is requested the application responds with a 200 status code and empty page and adds the requesting client device into the list of recognized devices.
CVSS Vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Reference
Attack Complexity
LOW
Privileges Required
NONE
User Interaction Required
NONE
Scope
NONE
Confidentiality Impact
UNCHANGED
Integrity Impact
HIGH
Availability Impact
HIGH
Base Score
HIGH
Base Severity
8.8
Share on: