by Kastro
Paper/Archive/CVE-2024-3701

CVE-2024-3701

TECNO com.transsion.kolun.aiservice — Improper Authentication in com.transsion.kolun.aiservice

EPSS 0.6%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (ADP)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 50.6.506 × 2010.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The system application (com.transsion.kolun.aiservice) component does not perform an authentication check, which allows attackers to perform malicious exploitations and affect system services.

Affected

ProductAffectedFixed inSource
com.transsion.kolun.aiservice13.0.0–CNA
hios13.0.0–CISA-ADP

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsecurity.tecno.com/SRC/blogdetail/236?lang=en_USrefsecurity.tecno.com/SRC/securityUpdates?type=SA