Executive Summary

The vulnerability is a DLL hijacking issue in the ZTE Cloud PC client uSmartView. Specifically, the executable uSmartViewServiceAgent.exe runs with SYSTEM privileges, and due to the DLL hijacking vulnerability, an attacker can trick the system into loading a malicious DLL. This allows the attacker to execute arbitrary code locally with elevated privileges, potentially leading to privilege escalation and memory corruption.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can have serious impacts including local arbitrary code execution, which means an attacker can run malicious code on your system. Because the affected process runs with SYSTEM privileges, the attacker can escalate their privileges to the highest level on the system. This can lead to full control over the affected machine, unauthorized actions, and potential memory corruption that could destabilize the system.

Useful 0 Not Useful 0