The PcSuite authentication flaw allows attackers to gain unauthorized access to the victim’s device through a defect in the Bluetooth authentication mechanism. Identified as CWE‑306 (Incorrect Authentication), the weakness enables an attacker to bypass access controls and access or modify device data, potentially leading to broader compromise. This represents a severe privacy and security violation.

The vulnerability affects vivo’s PcSuite application. Because no specific version ranges are supplied in the advisory, all installations of PcSuite that have not applied the vendor’s forthcoming resolution may be susceptible.

The CVSS score of 9.4 indicates very high severity. The EPSS score is not available, and the issue is not listed in CISA’s KEV catalog. The likely attack vector is proximity‑based Bluetooth interaction; an attacker must be within the operational range of the Bluetooth connection to exploit the flaw. The risk is significant but the exploit probability remains unclear without further data.