Nintendo records
9 published records for vendor nintendo.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 5
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')3
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-269 Improper Privilege Management1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
- CWE-787 Out-of-bounds Write1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
The weakness classes this vendor ships most often: where to look.
CWEBug bounty scope
The product’s vendor appears in a public program. Matched by name; verify the scope text in the program.
All records
9 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
46Plan | CVE-2022-47949No exploit | The Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons before 2.0.6 and other products, allows remote attackers to execunintendo · animal crossing\ · CWE-120 | Critical9.8 | — | 23.1% | Dec 24, 2022 |
40Plan | CVE-2020-13109No exploit | Morita Shogi 64 through 2020-05-02 for Nintendo 64 devices allows remote attackers to execute arbitrary code via crafted packet data to the nintendo · nintendo 64 · CWE-787 | Critical9.8 | — | 4.8% | May 15, 2020 |
39Monitor | CVE-2023-45887No exploit | DS Wireless Communication (DWC) with DWC_VERSION_3 and DWC_VERSION_11 allows remote attackers to execute arbitrary code on a game-playing clnintendo · ds wireless communication | Critical9.8 | — | 1.5% | Dec 19, 2023 |
39Monitor | CVE-2023-35856No exploit | A buffer overflow in Nintendo Mario Kart Wii RMCP01, RMCE01, RMCJ01, and RMCK01 can be exploited by a game client to execute arbitrary code nintendo · mario kart wii · CWE-120 | Critical9.8 | — | 1.1% | Jun 19, 2023 |
35Monitor | CVE-2022-3216No exploit | Nintendo Game Boy Color Mobile Adapter GB Tetsuji memory corruptionnintendo · game boy color firmware · CWE-119 | High8.8 | — | 0.6% | Sep 14, 2022 |
29Monitor | CVE-2024-34454No exploit | Nintendo Wii U OS 5.5.5 allows man-in-the-middle attackers to forge SSL certificates as though they came from a Root CA, because there is a CWE-269 | High7.4 | — | 0.1% | May 26, 2024 |
28Monitor | CVE-2022-36381No exploit | OS command injection vulnerability in Nintendo Wi-Fi Network Adaptor WAP-001 All versions allows an attacker with an administrative privilegnintendo · wi-fi network adaptor wap 001 firmware · CWE-78 | High7.2 | — | 1.5% | Aug 16, 2022 |
28Monitor | CVE-2022-36293No exploit | Buffer overflow vulnerability in Nintendo Wi-Fi Network Adaptor WAP-001 All versions allows an attacker with an administrative privilege to nintendo · wi-fi network adaptor wap 001 firmware · CWE-120 | High7.2 | — | 1.2% | Aug 16, 2022 |
25Monitor | CVE-2024-45200Proof of concept | In Nintendo Mario Kart 8 Deluxe before 3.0.3, the LAN/LDN local multiplayer implementation allows a remote attacker to exploit a stack-basedCWE-94 | Medium6.3 | — | 1.4% | Sep 30, 2024 |
- CVE-2022-4794946Plan
The Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons before 2.0.6 and other products, allows remote attackers to execu
CriticalCVSS 9.8No exploitEPSS 23%nintendo · animal crossing\Dec 24, 2022
- CVE-2020-1310940Plan
Morita Shogi 64 through 2020-05-02 for Nintendo 64 devices allows remote attackers to execute arbitrary code via crafted packet data to the
CriticalCVSS 9.8No exploitEPSS 4%nintendo · nintendo 64May 15, 2020
- CVE-2023-4588739Monitor
DS Wireless Communication (DWC) with DWC_VERSION_3 and DWC_VERSION_11 allows remote attackers to execute arbitrary code on a game-playing cl
CriticalCVSS 9.8No exploitEPSS 1%nintendo · ds wireless communicationDec 19, 2023
- CVE-2023-3585639Monitor
A buffer overflow in Nintendo Mario Kart Wii RMCP01, RMCE01, RMCJ01, and RMCK01 can be exploited by a game client to execute arbitrary code
CriticalCVSS 9.8No exploitEPSS 1%nintendo · mario kart wiiJun 19, 2023
- CVE-2022-321635Monitor
Nintendo Game Boy Color Mobile Adapter GB Tetsuji memory corruption
HighCVSS 8.8No exploitEPSS 0%nintendo · game boy color firmwareSep 14, 2022
- CVE-2024-3445429Monitor
Nintendo Wii U OS 5.5.5 allows man-in-the-middle attackers to forge SSL certificates as though they came from a Root CA, because there is a
HighCVSS 7.4No exploitEPSS 0%May 26, 2024
- CVE-2022-3638128Monitor
OS command injection vulnerability in Nintendo Wi-Fi Network Adaptor WAP-001 All versions allows an attacker with an administrative privileg
HighCVSS 7.2No exploitEPSS 1%nintendo · wi-fi network adaptor wap 001 firmwareAug 16, 2022
- CVE-2022-3629328Monitor
Buffer overflow vulnerability in Nintendo Wi-Fi Network Adaptor WAP-001 All versions allows an attacker with an administrative privilege to
HighCVSS 7.2No exploitEPSS 1%nintendo · wi-fi network adaptor wap 001 firmwareAug 16, 2022
- CVE-2024-4520025Monitor
In Nintendo Mario Kart 8 Deluxe before 3.0.3, the LAN/LDN local multiplayer implementation allows a remote attacker to exploit a stack-based
MediumCVSS 6.3Proof of conceptEPSS 1%Sep 30, 2024