writeups.xyz / Pwn2Own Miami 2022: AVEVA Edge Arbitrary Code Execution

Submitter : c2a

Date: 8 September 2022

Bounty : 20,000

Vulnerabilities :

• Arbitrary Code Execution
• Local Privilege Escalation

Programs :

• AVEVA

Authors :

• Daan Keuper (@Daankeuper)
• Thijs Alkemade (@Xnyhps)

Link :
https://sector7.computest.nl/post/2022-09-aveva-edge/