Exploitation Summary
EIP tracks 3 public exploits for CVE-2024-27460. PoCs published by xct, Alaatk, 10cks.
AI-analyzed exploit summary This exploit leverages a race condition in Windows MSI installer (CVE-2024-27460) to achieve local privilege escalation by manipulating directory junctions and oplocks to overwrite a rollback script with malicious content.
Description
A privilege escalation exists in the updater for Plantronics Hub 3.25.1 and below.
Exploits (3)
This exploit leverages a race condition in Windows MSI installer (CVE-2024-27460) to achieve local privilege escalation by manipulating directory junctions and oplocks to overwrite a rollback script with malicious content.
This repository provides a writeup for CVE-2024-27460, detailing a privilege escalation and arbitrary file read vulnerability in HP Plantronics Hub 3.25.1. The exploit involves manipulating a configuration file to read arbitrary files as SYSTEM.
The repository contains only a README.md file with minimal content, providing no functional exploit code or technical details for CVE-2024-27460.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L