CVE-2020-27192

EUVD-2020-19715 · Published Nov 17, 2020

BinaryNights ForkLift 3.4 was compiled with the com.apple.security.cs.disable-library-validation flag enabled which allowed a local attacker to inject code into ForkLift. This would allow the attacker to run malicious code with escalated privileges through ForkLift's helper tool.

Technologies

Binarynights Forklift

Weaknesses

CWE-862

CVSS scores

v3.17.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
v2.07.2AV:L/AC:L/Au:N/C:C/I:C/A:C

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Persistence Privilege Escalation Stealth Defense Impairment Credential Access

T1068Exploitation for Privilege Escalation T1211Exploitation for Stealth T1542.002Component Firmware T1556Modify Authentication Process

References

https://insinuator.net/2020/11/forklift-lpe/

Potentially impacted assets

See if this affects your attack surface