CVE-2024-27460 PoC — HP Plantronics Hub 安全漏洞

Source

https://github.com/xct/CVE-2024-27460

Associated Vulnerability

Title:HP Plantronics Hub 安全漏洞 (CVE-2024-27460)
Description:HP Plantronics Hub是美国惠普（HP）公司的一个工具，提供了对 Plantronics 耳机和通信设备的管理和控制功能。 HP Plantronics Hub 3.25.1版本及之前版本存在安全漏洞。攻击者利用该漏洞可以提升权限。

Description

Plantronics Desktop Hub LPE

Readme

# CVE-2024-27460 - Plantronics Desktop Hub LPE

Arbitrary File Delete to SYSTEM. Majority of code is based on the referenced PoC by @filip_dragovic. Thanks @filip_dragovic & @k0zmer :)

Blog Post: [https://mantodeasecurity.de/en/2024/05/cve-2024-27460-plantronics-hub-lpe](https://mantodeasecurity.de/en/2024/05/cve-2024-27460-plantronics-hub-lpe/)

## References

- https://support.hp.com/us-en/document/ish_9869257-9869285-16/hpsbpy03895
- https://github.com/Wh04m1001/CVE-2023-20178
- [@filip_dragovic](https://twitter.com/filip_dragovic)
- [@k0zmer](https://twitter.com/k0zmer)

File Snapshot


 [4.0K]  /data/pocs/4144b2d56eab120a5bf67b858b3d2e79a7e03740
├── [4.0K]  CVE-2024-27460
│   ├── [558K]  cmd.rbs
│   ├── [ 13K]  CVE-2024-27460.cpp
│   ├── [6.7K]  CVE-2024-27460.vcxproj
│   ├── [1.5K]  CVE-2024-27460.vcxproj.filters
│   ├── [2.3K]  def.h
│   ├── [4.1K]  FileOpLock.cpp
│   ├── [ 946]  FileOpLock.h
│   ├── [184K]  Msi_Rollback.msi
│   ├── [ 497]  resource.h
│   └── [1.6K]  resource.rc
├── [1.4K]  CVE-2024-27460.sln
└── [ 582]  README.md

1 directory, 12 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!