A team of White Knight hackers has discovered a critical security issue called ENLBufferPwn that might give hackers “full console” access to your Switch, 3DS, and Wii U games and systems.
After a long investigation, Nintendo has been updating the affected games by releasing patches, which may explain why some older games, such as Mario Kart 7 (opens in a new tab), were recently and mysteriously updated following many years of inactivity.
Here is ENLBufferPwn, a serious vulnerability in many proprietary games on 3DS, Wii U and Switch. It allows remote code execution on a victim’s console just by having an online gaming session with an attacker,” explained one of the gamers who discovered the exploit on Twitter, via Nintendo Everything (opens in a new tab). ).
“Combined with other operating system vulnerabilities, this vulnerability might allow an attacker to gain full control of the console and steal sensitive information or take audio/video recordings. It got a score of 9.8/10 (Critical) on the CVSS 3.1 calculator.”
Here is ENLBufferPwn (CVE ID pending), a serious vulnerability in many first-party games on the 3DS, Wii U, and Switch. Allows remote code execution on a victim’s console simply by having an online game session with an attacker. Vulnerability report: pic.twitter.com/4qewU5YQ9xDecember 24, 2022
see more
Pablo goes on to explain that “Nintendo has been releasing patches for affected games throughout 2022” and that “a list of games known to have had the vulnerability at some point can be found in the vulnerability report.” Along with both 6Glaz and fishguy6564, who also independently discovered the issue, the vulnerability was reported to Nintendo via its HackerOne program.
“I would like to thank Nintendo for giving me the opportunity to assist in finding and investigating this vulnerability and putting resources into fixing it in older titles. I hope these actions have helped create a safer online gaming environment,” concluded Pablo.
Now that the details of the exploit have been released, it’s probably a good idea to take what’s left of the festive downtime and use it to make sure all your Nintendo-flavored systems and games are fully up to date to make sure you don’t fall victim to this exploit. .
Affected games reportedly include Mario Kart 8 and its Deluxe version, Animal Crossing: New Horizons, ARMS, Splatoon 2, Splatoon 3 and Super Mario Maker 2, Splatoon 3 and Mario Kart 8. As of this writing, it is unclear if Nintendo will. release updates for games on older systems like Wii U, but as always we’ll keep you posted.
Here is our selection of best nintendo switch games (opens in a new tab) available to play right now.
