CVE-2024-3701

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-3701
The system application (com.transsion.kolun.aiservice) component does not perform an authentication check, which allows attackers to perform malicious exploitations and affect system services.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://security.tecno.com/SRC/blogdetail/236?lang=en_US Vendor Advisory
https://security.tecno.com/SRC/securityUpdates?type=SA Vendor Advisory
https://security.tecno.com/SRC/blogdetail/236?lang=en_US Vendor Advisory
https://security.tecno.com/SRC/securityUpdates?type=SA Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:o:tecno:hios:13.0.0:*:*:*:*:*:*:*
History

17 Jun 2025, 20:58

Type Values Removed Values Added
First Time Tecno
Tecno hios
CPE cpe:2.3:o:tecno:hios:13.0.0:*:*:*:*:*:*:*
References () https://security.tecno.com/SRC/blogdetail/236?lang=en_US - () https://security.tecno.com/SRC/blogdetail/236?lang=en_US - Vendor Advisory
References () https://security.tecno.com/SRC/securityUpdates?type=SA - () https://security.tecno.com/SRC/securityUpdates?type=SA - Vendor Advisory

21 Nov 2024, 09:30

Type Values Removed Values Added
References () https://security.tecno.com/SRC/blogdetail/236?lang=en_US - () https://security.tecno.com/SRC/blogdetail/236?lang=en_US -
References () https://security.tecno.com/SRC/securityUpdates?type=SA - () https://security.tecno.com/SRC/securityUpdates?type=SA -

21 Aug 2024, 03:15

Type Values Removed Values Added
Summary (en) The system application (com.transsion.kolun.aiservice) component does not perform an authentication check, which allows attackers to perform malicious exploitations and affect system services. (en) The system application (com.transsion.kolun.aiservice) component does not perform an authentication check, which allows attackers to perform malicious exploitations and affect system services.
CWE CWE-306

01 Aug 2024, 13:56

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.8
CWE CWE-287

15 Apr 2024, 13:15

Type Values Removed Values Added
Summary
  • (es) El componente de la aplicación del sistema (com.transsion.kolun.aiservice) no realiza una verificación de autenticación, lo que permite a los atacantes realizar explotaciones maliciosas y afectar los servicios del sistema.

15 Apr 2024, 09:15

Type Values Removed Values Added
References
  • () https://security.tecno.com/SRC/securityUpdates?type=SA -

15 Apr 2024, 08:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-15 08:15

Updated : 2025-06-17 20:58

NVD link : CVE-2024-3701

Mitre link : CVE-2024-3701

CVE.ORG link : CVE-2024-3701

JSON object : View

Products Affected

tecno

  • hios
CWE
CWE-306

Missing Authentication for Critical Function

CWE-287

Improper Authentication