CVE-2026-22070

HIGH

ColorOS Assistant has an unauthenticated start-download channel, leading to file path traversal.

StatusAnalyzed

설명

ColorOS Assistant has an unauthenticated start-download channel, leading to file path traversal.

Score Summary

CVSS Score: 7.1
Version: 3.1
VPI: 71
Why this VPI (explainable, experimental)
VPI breakdown
Impact 71.00
Exploitation signal(No additional exploitation signal) ×1.00
VPI 71.00
VPI formula vpi-v1
EPSS: 0.2%
(상위 11.0%)
Attack Vector: Local Access
Low Complexity
No Privileges
User Interaction Required
Scope Changed
No Confidentiality Impact
Low Integrity Impact
High Availability Impact

Details

CWE Weakness Classification

References (1)

Affected Products (1)

Impact	71.00
Exploitation signal(No additional exploitation signal)	×1.00
VPI	71.00