Core Security issued advisory on Monday that revealed several software vulnerabilities in Lenovo SHAREit app for Windows and Android that could be exploited by anyone who can guess ‘12345678’ password. Lenovo was using one of the most obvious, awful passwords of all time as a hard-coded password in its file sharing software. The vulnerabilities were remotely exploitable and affected the Android 3.0.0_ww and Windows 2.5.1.1. Lenovo took three months to patch the flaws to Lenovo back in October last year.
Source: https://thehackernews.com/2016/01/shareit-file-sharing.html