CVE-2024-27460

HP Plantronics Hub version 3.25.1 and below is vulnerable to a privilege escalation and arbitrary file read vulnerability within its updater. The root cause involves an insecure path and the PlantronicsUpdateService service. An attacker with low privileges can create a file named MajorUpgrade.con...

CVE-2024-6147

CVE-2024-6147 affects Poly Plantronics Hub, specifically the Spokes Update Service. A local attacker who can run low-privilege code can abuse symbolic links to delete files and escalate to SYSTEM, enabling arbitrary code execution. The available connected documents confirm local-privilege escalat...