Pwn2Own Toronto 2023: Part 5 – The Exploit

In this final part of this series, we are finally going to explain how the stack-based buffer overflow vulnerability can be exploited to gain unauthenticated remote code execution (RCE) on the Synology BC500 camera.

buffer buffer overflow buffer overflow vulnerability camera can code code execution exploit exploited internet of things overflow pwn2own pwn2own toronto 2023 rce remote code remote code execution research series stack synology toronto unauthenticated vulnerability write-up