Abstract:
Nintendo confirmed that there are security vulnerabilities in some QR code functions of the first-generation Nintendo Switch, which may cause the leakage of host information or run illegal code. Affected devices should update their systems to 23.0.0 as soon as possible.
Documents released by Nintendo on September 10 show that the risk involves two usage scenarios: transferring content through the "Send to Smartphone" function in the photo album, and using cars in "Mario Kart Live: Home Circuit". Both functions will display a QR code on the console or TV screen.
This vulnerability requires a malicious third party to directly read the QR code on the screen to exploit it. If the QR code can be prevented from being read by others, the vulnerability will not be exploited; otherwise, an attacker may use it to run illegal code or obtain information saved on the host.
Affected is the first-generation Nintendo Switch with a system version lower than 23.0.0. Nintendo also stated that there is no risk of console information being obtained on Nintendo Switch 2.
Users can enter "Settings" and "Host" from the HOME menu to view the current system version and perform updates. Users who are temporarily unable to upgrade should ensure that the QR code cannot be read by third parties when using the above two functions, and do not connect their smartphones or devices other than racing cars.
Comments