Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-9938

Опубликовано: 22 мар. 2019
Источник: nvd
CVSS3: 5.3
CVSS2: 2.9
EPSS Низкий

Описание

The SHAREit application before 4.0.42 for Android allows a remote attacker (on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated) to download arbitrary files from the device including contacts, photos, videos, sound clips, etc. The attacker must be authenticated as a "recognized device."

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:ushareit:shareit:*:*:*:*:*:android:*:*
Версия до 4.0.42 (исключая)

EPSS

Процентиль: 37%
0.00156
Низкий

5.3 Medium

CVSS3

2.9 Low

CVSS2

Дефекты

CWE-639

Связанные уязвимости

CVSS3: 5.3
github
больше 3 лет назад

The SHAREit application before 4.0.42 for Android allows a remote attacker (on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated) to download arbitrary files from the device including contacts, photos, videos, sound clips, etc. The attacker must be authenticated as a "recognized device."

EPSS

Процентиль: 37%
0.00156
Низкий

5.3 Medium

CVSS3

2.9 Low

CVSS2

Дефекты

CWE-639