Nintendo

Nintendo 的公开漏洞报告、类别分布与常见资产。

攻击面

弱点类别分布

• 内存破坏9
• 访问控制3
• 密码学缺陷3
• 业务逻辑2
• 信息泄露1
• 注入与走私1

主要弱点

• 栈溢出4
• 堆溢出3
• 访问控制缺陷（通用）2
• 中间人攻击1
• 内存破坏（通用）1
• 权限提升1
• 资源注入1
• Unlabeled1
• 释放后使用1
• Client-Side Enforcement of Server-Side Security1

常见资产

• Nintendo Switch applications for which Nintendo is the publisher worldwideHARDWARE · 9
• Nintendo 3DS applications for which Nintendo is the publisher worldwide HARDWARE · 3
• Nintendo 3DS SystemHARDWARE · 3
• Nintendo Switch SystemHARDWARE · 2
• Nintendo Switch 2 applications for which Nintendo is the publisher worldwideHARDWARE · 1
• Nintendo Switch 2 System ProcessesHARDWARE · 1

高票报告

当前状态 19 份 · 全部 19

1. 129
   [3DS][SSL] Improper certificate validation allows an attacker to perform MitM attacks密码学缺陷 · 2020-12-18 · 低危
   $0证书校验不当
2. 74
   ASLR leak in Mario Kart World through LAN mode信息泄露 · 2026-02-19 · 高危
   $0信息泄露
3. 65
   [Xenoblade Chronicles X: Definitive Edition] Unrestricted RPCs allow DoS and writing arbitrary flags remotely注入与走私 · 2025-05-15 · 严重
   $0资源注入
4. 62
   Splatoon 3 In-Match Integrity Bypass via Consensus Reflection Attack on Unordered Peer Submission业务逻辑 · 2026-07-02 · 高危
   $0Client-Side Enforcement of Server-Side Security
5. 55
   Splatoon 3 Anticheat Seed Randomization Weakness密码学缺陷 · 2026-02-19 · 未评级
   $0Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
6. 53
   Man-in-the-middle through broken SSL certificate verification密码学缺陷 · 2025-08-08 · 中危
   $0中间人攻击
7. 43
   [3DS][SSL][SDK] Unchecked number of audio channels in Mobiclip SDK leads to RCE in eShop movie player内存破坏 · 2020-12-18 · 低危
   $0堆溢出
8. 42
   [Wii U/3DS/Switch] Improper bounds check in StationURL in all NEX clients leading to remote crash/RCE内存破坏 · 2026-08-07 · 低危
   $0栈溢出
9. 40
   [Xenoblade Chronicles X: Definitive Edition] Improper validation of names allows injecting formatting tags and bypassing profanity filter业务逻辑 · 2025-05-15 · 中危
   $0Unlabeled
10. 38
    Arbitrary code execution in TSEC Heavy Secure, return-oriented programming in TSEC Secure ROM, and recovery of TSEC-derived cryptographic secrets访问控制 · 2024-07-22 · 中危
    $0权限提升
11. 38
    [3DS][SSL] Use of uninitialized class member leads to RCE in eShop movie player内存破坏 · 2020-12-18 · 低危
    $0释放后使用
12. 37
    [Splatoon 3] Kick other players with NplnLogin message访问控制 · 2026-07-02 · 中危
    $0访问控制缺陷（通用）
13. 36
    [Switch, PIA/MK8DX] Stack buffer overflow and potential RCE in PIA (LAN/LDN, possibly NEX) room info deserialization内存破坏 · 2024-09-30 · 中危
    $0栈溢出
14. 36
    [MK8DX] Improper ranking/replay file parsing内存破坏 · 2025-07-07 · 严重
    $0内存破坏（通用）
15. 35
    [Switch] Remote stack buffer overflow in the LDN/LP2P DHCP server leads to control-flow hijack内存破坏 · 2026-10-15 · 高危
    $0栈溢出
16. 30
    [3DS][StreetPass] Heap Overflow in Swapnote parser leads to userland StreetPass RCE内存破坏 · 2021-01-18 · 低危
    $0堆溢出
17. 30
    [3DS][StreetPass] Buffer Overflow in Super Mario Maker level decompression内存破坏 · 2021-04-21 · 低危
    $0堆溢出
18. 23
    [MK8DX] Improper verification of Competition creation allows to create "Official" competitions访问控制 · 2022-12-15 · 高危
    $0访问控制缺陷（通用）
19. 23
    NEX: Stack overflow in UnicodeToUtf8内存破坏 · 2025-06-27 · 低危
    $0栈溢出