Getting Remote Code Execution On Inductive Automation Ignition
Channel: Zero Day Initiative
Date: 11/06/2020

At the inaugural Pwn2Own Miami, the team of Pedro Ribeiro and Radek Domanski used an information leak and an unsafe deserialization bug to get code execution on the Inductive Automation Ignition system. Their final effort ending Day One of the contest earned them $25,000. This video shows how the exploit works.

For more details about the bugs involved, including root cause and a Metasploit module, see the blog at:
https://www.zerodayinitiative.com/blog/2020/6/10/a-trio-of-bugs-used-to-exploit-inductive-automation-at-pwn2own-miami