The vulnerability allows users to bypass a connection confirmation pop‑up within the PcSuite application, removing a necessary step that otherwise requires user approval. This flaw is classified as an authorization bypass and could enable unintended actions to be carried out without explicit user consent. The CVSS score of 5.3 indicates a moderate severity, reflecting limited impact to confidentiality and availability but a noteworthy threat to integrity and proper authorization controls.

The affected system is the vivo PcSuite application. No specific version information is listed, so all releases of this product are potentially vulnerable.

The CVSS base score of 5.3 signals moderate risk, yet the EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. There is no disclosed exploit code, and the request path for exploitation is inferred to involve using the feature that triggers the confirmation pop‑up; the likely attack vector is local or possibly remote if the feature can be accessed over a network. The absence of exploitation data suggests that while the flaw exists, it is not yet widely leveraged by attackers.