---
id: 7338
title: "The first step to PWN2OWN - A sad one"
source_domain: blog.viettelcybersecurity.com
source_url: "https://blog.viettelcybersecurity.com/the-first-step-to-pwn2own-but-a-sad-one/"
published_at: "2022-12-09T03:33:33Z"
tags: ["command-injection", "iot-security", "netgear", "pwn2own", "upnp", "rax30"]
phying_url: "https://phying.com/item/7338"
lang: en
---

# The first step to PWN2OWN - A sad one

## Summary

A researcher's first find: LAN-side command injection in the NETGEAR RAX30 UPnP service via a malicious SOAPACTION header embedded into a logger command; patched just before Pwn2Own Toronto 2022.

## Intelligence Metadata

- **Sources:** blog.viettelcybersecurity.com
- **Published:** 2022-12-09T03:33:33Z
- **Original:** https://blog.viettelcybersecurity.com/the-first-step-to-pwn2own-but-a-sad-one/
- **Phying News:** https://phying.com/item/7338