ZTE Cloud Computer Client PROCESS Guard Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability has been identified in the ZTE PROCESS Guard service of the cloud computer client. This vulnerability may allow local arbitrary code execution, privilege escalation, and bypassing of path traversal restrictions.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a user to gain elevated rights or access within the system. Additionally, it could enable local arbitrary code execution.

Remediation

Users can upgrade to ZXCLOUD-iRAI-ClientV7.25.43 to address this vulnerability. For assistance, contact the ZTE Global Customer Support Center.