Nintendo Switch devices running firmware versions before 23.0.0 are vulnerable to remote code execution due to a stack-based buffer overflow in the local wireless networking stack.

This vulnerability is a stack-based buffer overflow (CWE-121) located within the local wireless networking component of the device. An unauthenticated attacker within physical wireless range can trigger this condition by sending malformed network traffic, ultimately enabling arbitrary code execution through return-oriented programming (ROP) techniques.

Successful exploitation grants an attacker the ability to execute arbitrary code on the device, potentially leading to a total compromise of the affected console. Given the CVSS score of 8.4, this high-severity flaw presents a significant risk of unauthorized access or device takeover. While the requirement for proximity limits the attack surface, the impact on integrity and availability is severe for users and enterprise environments utilizing these devices.

Immediate Action: Update all Nintendo Switch devices to firmware version 23.0.0 or later immediately to apply the vendor-supplied security patch.

Proactive Monitoring: Monitor network traffic for unusual patterns or bursts of malformed packets originating from devices within local wireless proximity to the console.

Compensating Controls: Ensure that Nintendo Switch devices are kept on isolated network segments or restricted wireless environments to minimize the exposure to potentially malicious actors within range.

Public Exploit Available: No (exploit_available: unknown)

The severity of this vulnerability, combined with the potential for arbitrary code execution, necessitates prompt action. Administrators and end users should prioritize the installation of the 23.0.0 firmware update to remediate the buffer overflow risk. Failure to patch these devices leaves them susceptible to exploitation by any attacker within wireless range.