ZTE Cloud PC client uSmartView contains a DLL hijacking flaw. The vulnerable service uSmartViewServiceAgent.exe runs with SYSTEM privileges; if an attacker places a malicious DLL in the directory the service probes, the service will load it instead of the intended library. This grants the attacker local arbitrary code execution, privilege escalation to SYSTEM, and the potential for memory corruption.

This affects ZTE Cloud PC client (uSmartView) deployed on ZTE ZXCLOUD iRAI systems. The vulnerability is present in the current released version(s) of the client, as no specific version is enumerated here.

The CVSS score of 5.7 indicates moderate severity. EPSS is not published, and the vulnerability is not listed in CISA's KEV catalog. The attack vector is local; an attacker with physical or local account access can supply a malicious DLL in the expected location. Successful exploitation would allow execution of any code with SYSTEM privileges.