ZTE uSmartview vulnerabilities

A remote denial-of-service vulnerability exists in the ZTE Cloud PC client uSmartview, which may lead to memory corruption and remote denial of service. The description does not provide technical details or affected versions.

ZTE Cloud PC client uSmartView contains a DLL hijacking vulnerability. Since uSmartViewServiceAgent.exe runs with SYSTEM privileges, successful hijacking enables local arbitrary code execution, privilege escalation, and memory corruption.

There is an openssl.cnf privilege escalation vulnerability in the ZTE Cloud PC client uSmartview. An attacker can execute arbitrary code locally and escalate privileges.