CVE-2019-15742

This Metasploit module exploits a privilege escalation vulnerability in Plantronics Hub's SpokesUpdateService by writing a malicious executable path to a writable configuration file, which is then executed as SYSTEM.

This Metasploit module exploits a privilege escalation vulnerability in Plantronics Hub's SpokesUpdateService by writing a malicious executable path to the writable MajorUpgrade.config file, which is executed as SYSTEM. The exploit generates a payload, writes it to a temporary directory, and modifies the configuration file to trigger execution.