Pwn2Own Miami 2023 - Day Two Results

February 15, 2023 | Dustin Childs

Welcome to Day 2 of Pwn2Own Miami 2023. We’ll be updating this blog in real time as results become available. For this year’s event, each round will receive the full payout for unique entries.

All results current as of 1630 Eastern (GMT -5)

SUCCESS - Claroty used a resource exhaustion to complete their DoS attack against the Softing edgeConnector Siemens. They earn $5,000 and 5 Master of Pwn points.

SUCCESS - Team ECQ used a three-bug chain to execute their RCE attack against the Triangle Microworks SCADA Data Gateway. They earn $20,000 and 20 Master of Pwn points.

BUG COLLISION - Claroty was able to execute their RCE attack against the Inductive Automation Ignition. However, the exploit they used was used prior in the contest. They still earn $10,000 and 10 Master of Pwn points.

SUCCESS - STAR Labs was able to execute their DoS attack against the Unified Automation UaGateway. They earn $5,000 and 5 Master of Pwn points.

SUCCESS - Claroty used a UAF to execute their DoS against Unified Automation uaGateway. They earn $5,000 and 5 Master of Pwn points.

SUCCESS - Claroty used a three-bug chain to execute their RCE attack against the Softing edgeAggregator Siemens. They earn $20,000 and 20 Master of Pwn points.

That’s all for Day 2 of Pwn2Own Miami 2023! We’ve awarded $125,000 for 11 unique bugs so far this week. We’ll continue posting results and videos to Twitter, YouTube, Mastodon, LinkedIn, and Instagram, so follow us for the latest news from the event. We’ll be back tomorrow with our final attempts! Here’s the leaderboard heading into Day 3: