CVE-2019-9939 - CVE House
Back to Database
Status published High CVE-2019-9939

The SHAREit application before 4.0.36 for Android allows a remote...

Vulnerability Description

The SHAREit application before 4.0.36 for Android allows a remote attacker (on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated) to bypass authentication by trying to fetch a non-existing page. When the non-existing page is requested, the application responds with a 200 status code and empty page, and adds the requesting client device into the list of recognized devices.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-9939

Credits & Attribution

No credits recorded in the NVD database.

References

More from ushareit

View All →
CVE-2019-9938
The SHAREit application before 4.0.42 for Android allows a remote...
Medium 5.3
CVE-2019-15234
SHAREit through 4.0.6.177 does not check the full message length...
High 7.5
CVE-2019-14941
SHAREit through 4.0.6.177 does not check the body length from...
High 7.5

Affected Vendor

Affected Software

shareit
Vulnerable Versions:
0

Timeline

Official Publish: March 22nd, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.