CVE-2019-9939: High severity shareit vulnerability
The SHAREit application before 4.0.36 for Android allows a remote attacker (on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated) to bypass authentication by trying to fetch a non-existing page. When the non-existing page is requested, the application responds with a 200 status code and empty page, and adds the requesting client device into the list of recognized devices.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-9939?
CVE-2019-9939 is classified as a high-severity vulnerability due to its potential to allow unauthorized access to sensitive files on devices.
How do I fix CVE-2019-9939?
To fix CVE-2019-9939, update the SHAREit application to version 4.0.36 or later.
Who is affected by CVE-2019-9939?
CVE-2019-9939 affects all versions of the SHAREit application prior to 4.0.36 on Android devices.
What type of attack does CVE-2019-9939 enable?
CVE-2019-9939 enables remote attackers on the same network to bypass authentication and access files on adjacent devices.
What can an attacker do with CVE-2019-9939?
An attacker can exploit CVE-2019-9939 to gain unrestricted access to files on nearby devices using the SHAREit application's file transfer feature.