Detections
Analytics
CVE-2023-47270
high
Description
A vulnerability in the Plantronics Hub updater system, if exploited, could allow an unprivileged local attacker to set any permissions on arbitrary files on an affected device. This in turn could be exploited to execute arbitrary code as the Microsoft Windows SYSTEM account by overwriting existing binaries that are executed with SYSTEM privileges as part of the normal operation of the device. The vulnerability is due to a race condition in the Plantronics Hub updater.