Kolun Service Vulnerable to Malicious Exploitations Due to Lack of Authentication Check
CVE-2024-3701

Currently unrated

Key Information:

Vendor

Tecno

Status
Com.transsion.kolun.aiservice
Vendor
CVE Published:
15 April 2024

What is CVE-2024-3701?

The system application (com.transsion.kolun.aiservice) component does not perform an authentication check, which allows attackers to perform malicious exploitations and affect system services.

Affected Version(s)

com.transsion.kolun.aiservice HiOS 13.0.0

References

https://security.tecno.com/SRC/blogdetail/236?lang=en_US
https://security.tecno.com/SRC/securityUpdates?type=SA

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.