What’s Vulnerable › Vulnerabilities

CVE-2024-3701: Improper Authentication in com.transsion.kolun.aiservice

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-04-15 · updated 2026-06-17
• Weakness: CWE-306

Description

The system application (com.transsion.kolun.aiservice) component does not perform an authentication check, which allows attackers to perform malicious exploitations and affect system services.

Affected products

• TECNO Hios: 13.0.0

References

• https://security.tecno.com/SRC/blogdetail/236?lang=en_US
• https://security.tecno.com/SRC/securityUpdates?type=SA
• https://security.tecno.com/SRC/blogdetail/236?lang=en_US
• https://security.tecno.com/SRC/securityUpdates?type=SA

Get alerted when CVE-2024-3701 or the next vulnerability affects your stack