CVE-2020-3950

This Metasploit module exploits a setuid binary vulnerability in VMware Fusion (CVE-2020-3950) by creating a hard link to the 'Open VMware USB Arbitrator Service' binary and replacing it with a malicious payload to achieve privilege escalation.

This exploit leverages a symlink vulnerability in VMware Fusion to escalate privileges by replacing a service binary with a malicious script that sets the SUID bit on a copy of bash. The attacker gains root access via the compromised service execution.

The repository contains functional exploit scripts for CVE-2020-3950, a VMware Fusion Elevation of Privilege vulnerability. The PoC script demonstrates the vulnerability by exploiting a local privilege escalation flaw.

This Metasploit module exploits a setuid binary misuse in VMware Fusion (CVE-2020-3950) to achieve local privilege escalation by manipulating the 'Open VMware USB Arbitrator Service' binary path and loading an attacker-controlled payload.