pentester.land· Sep 8, 2022· by Daan Keuper (@daankeuper), Thijs Alkemade (@xnyhps)💰 Bounty: 20,000

Pwn2Own Miami 2022: AVEVA Edge Arbitrary Code Execution

Target Program: AVEVA

🎯 Vulnerability: Web Security Vulnerability

💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.

#Arbitrary Code Execution#Local Privilege Escalation