CVE-2021-34170

Bandai Namco FromSoftware Dark Souls III allows remote attackers to execute arbitrary code

published June 15, 2021

CVSS
—
EPSS
3%
Percentile
86.5
In the wild
Unconfirmed
What it is

⚠️ A crafty remote attack can turn your Dark Souls III experience into a hacker's playground! 🌌 Think of it like leaving your game console unattended while someone else holds the controller—if they know the right buttons to press, they could wreak havoc in your game world without your consent! An attacker could execute arbitrary code, potentially allowing them to manipulate game settings, access personal information, or even hijack your system entirely. It's a wild ride that could lead to chaos both in-game and on your device.

Put simply

Think of it like leaving your game console unattended while someone else holds the controller—if they know the right buttons to press, they could wreak havoc in your game world without your consent! This vulnerability exists because Dark Souls III does not properly validate incoming remote commands, allowing attackers to inject malicious code and take control.

What to do

An attacker could execute arbitrary code, potentially allowing them to manipulate game settings, access personal information, or even hijack your system entirely. It's a wild ride that could lead to chaos both in-game and on your device. While no patch is currently available, it's crucial to limit your online interactions with unknown players and avoid sharing sensitive information while gaming. Keep an eye on updates from Bandai Namco for a fix! You've got this! Stay vigilant and enjoy your epic quests safely! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02831 · 86.5th percentile
Published
2021-06-15T15:49Z
EPSS history
Timeline
  • 15 JUN 15:49Z
    Bandai Namco FromSoftware Dark Souls III allows remote attackers to execute arbitrary code
    cvelistv5