Local Privilege Escalation Vulnerability in Poly Plantronics Hub
CVE-2024-6147

7.8HIGH

Key Information:

Vendor

HP
Status
Poly Plantronics Hub
Vendor
CVE Published:
20 June 2024

What is CVE-2024-6147?

The local privilege escalation vulnerability identified in the Poly Plantronics Hub relates to a flaw in the Spokes Update Service, allowing an attacker with low-privileged code execution capabilities to escalate their privileges. By creating a symbolic link, an unauthorized user can manipulate the service to delete critical files or execute arbitrary code with elevated privileges, invoking SYSTEM level access. This situation raises significant security concerns for users relying on the Poly Plantronics Hub for effective communication solutions. Vigilant monitoring and timely patching are essential to mitigate the risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.zerodayinitiative.com/advisories/ZDI-24-802/

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.