cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score
CVE-2024-6147,https://securityvulnerability.io/vulnerability/CVE-2024-6147,Local Privilege Escalation Vulnerability in Poly Plantronics Hub,"The local privilege escalation vulnerability identified in the Poly Plantronics Hub relates to a flaw in the Spokes Update Service, allowing an attacker with low-privileged code execution capabilities to escalate their privileges. By creating a symbolic link, an unauthorized user can manipulate the service to delete critical files or execute arbitrary code with elevated privileges, invoking SYSTEM level access. This situation raises significant security concerns for users relying on the Poly Plantronics Hub for effective communication solutions. Vigilant monitoring and timely patching are essential to mitigate the risks associated with this vulnerability.",HP,Poly Plantronics Hub,7.8,HIGH,0.00215999991632998,false,,false,false,false,,,false,false,,2024-06-20T20:15:00.000Z,0
CVE-2024-27460,https://securityvulnerability.io/vulnerability/CVE-2024-27460,Privilege Escalation Vulnerability Affects Plantronics Hub 3.25.1,"A privilege escalation vulnerability has been identified in the updater component of Plantronics Hub software versions 3.25.1 and earlier. This vulnerability could potentially allow attackers to elevate their permissions, thereby gaining unauthorized access to system resources and sensitive information. Organizations using affected versions are advised to implement appropriate security measures to mitigate the risk associated with this vulnerability.",HP,Plantronics Hub,,,0.0004299999854993075,false,,false,false,true,2024-05-13T20:15:14.000Z,true,false,false,,2024-05-14T15:12:00.000Z,0