ZTE uSmartview EUVD-2026-28340

Attacker must have local authenticated access to the system running ZTE uSmartview (PR:L in CVSS vector). The vulnerability requires specific input formatting and high complexity (AC:H) suggests the format string injection may require detailed knowledge of memory layout, specific application build, or precise input manipulation. Default installations without explicit hardening are likely vulnerable; exploitation is not possible via network access or without established local user session.

CVSS 4.7 with local attack vector (AV:L), high complexity (AC:H), and low privilege requirement (PR:L) indicates this is a local privilege or local user denial-of-service rather than network-facing threat. The availability impact is high (A:H) but confidentiality and integrity are unaffected (C:N/I:N). EPSS score not provided in input data. KEV status unknown - no confirmation of active exploitation. The high complexity requirement (AC:H) and local attack vector significantly limit real-world risk compared to the base CVSS suggests. This is primarily a denial-of-service vector affecting cloud infrastructure operators where local user access is already established, not an immediate network-level threat. Risk is moderate for cloud PC deployments with multi-tenant or hostile internal users; low for enterprise deployments with strong access controls.

An authenticated local user on a system running ZTE uSmartview crafts a specially formatted input string that exploits the format string vulnerability in a user-facing parameter (configuration file, environment variable, or local IPC message). When the application processes this input without proper sanitization, it crashes due to memory corruption, causing denial of service. Recovery requires manual restart of the uSmartview service.