Exploitation Summary
EIP tracks 2 public exploits for CVE-2023-42931. PoCs published by d0rb, tageniu.
AI-analyzed exploit summary This repository contains a functional privilege escalation exploit for CVE-2023-42931, targeting macOS Monterey, Ventura, and Sonoma. The exploit leverages the 'diskutil' command to manipulate filesystem mount options, enabling an unprivileged user to gain root access by creating and executing a setuid shell.
Description
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6.3, macOS Sonoma 14.2, macOS Monterey 12.7.2. A process may gain admin privileges without proper authentication.
Exploits (2)
This repository contains a functional privilege escalation exploit for CVE-2023-42931, targeting macOS Monterey, Ventura, and Sonoma. The exploit leverages the 'diskutil' command to manipulate filesystem mount options, enabling an unprivileged user to gain root access by creating and executing a setuid shell.
This repository contains a functional local privilege escalation (LPE) exploit for CVE-2023-42931, targeting macOS versions 12.0-12.7.1, 13.0-13.6.2, and 14.0-14.1.2. The exploit leverages filesystem manipulation to achieve root privileges by creating a setuid shell binary and exploiting improper permission handling.
References (6)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H