Critical Vulnerability In Nintendo 3DS Console Could Allow MiTM Attacks

guest · Dec 28, 2020

Critical Vulnerability In Nintendo 3DS Console Could Allow MiTM Attacks
December 27, 2020
https://latesthackingnews.com/2020/...intendo-3ds-console-could-allow-mitm-attacks/

A researcher discovered a highly critical vulnerability affecting the Nintendo 3DS console. Exploiting this bug could allow an adversary to MiTM attacks against gamers. The researcher won a hefty $12K+ bounty for reporting this bug.
Nintendo 3DS Vulnerability
Reportedly, a security researcher discovered a critical security flaw affecting the now-discontinued Nintendo 3DS handheld gaming console.

The vulnerability resided in the Nintendo 3DS handling of digital certificates. Specifically, due to improper certificate validation, it became possible for an adversary to spoof certificates and perform man-in-the-middle MiTM attacks.
Click to expand...

As described in the bug report,

The SSL system module does not properly validate the x509 certificates when establishing an SSL/TLS connection. Actually, the SSL system module does not check the signatures when validating a certificate chain, allowing anyone to forge fake certificates and perform MitM attacks or spoof trusted servers.
This vulnerability affected all Nintendo 3DS consoles with firmware version 11.13 or below. It received a critical severity rating with a score of 9-10.
Click to expand...

Besides patching the bug, Nintendo also awarded the researcher with a hefty bounty of $12,168.

The researcher has named this exploit “SSLoth” about which, he has shared the technical details on GitHub here.
Click to expand...

Log in or Sign up

Critical Vulnerability In Nintendo 3DS Console Could Allow MiTM Attacks

guest Guest

Log in or Sign up

Critical Vulnerability In Nintendo 3DS Console Could Allow MiTM Attacks

guest Guest

Useful Searches