DCSG1 - Pwn2Own Level Break of a Printer - SungJun Park, WonBeen Im
DEFCONConference · 41:08 · Watch on YouTube
Two Korean researchers from Patworks exploited an invalid-free bug in Canon's proprietary CPCA protocol to get remote code execution on a Canon imageCLASS MF654Cdw running DryOS, winning $10,000 at Pwn2Own Ireland 2025.