CVE-2022-24125

The matchmaking servers of Bandai Namco FromSoftware Dark Souls III through 2022-03-19 allow remote attackers to send arbitrary push requests to clients via a RequestSendMessageToPlayers request. For example, ability to send a push message to hundreds of thousands of machines is only restricted o...

CVE-2022-24125

creationtimestamp| type| source ---|---|--- 2022-03-20 06:23:27+00:00| seen| https://t.me/cibsecurity/39292 2022-03-22 01:01:20+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1697...

CVE-2022-24125

Dark Souls III’s matchmaking server vulnerability CVE-2022-24125 allows remote attackers to send arbitrary push messages to clients via RequestSendMessageToPlayers, bypassing client-side restrictions. The issue affects DS3 versions up to 2022-03-19 and can enable large-scale pushes to hundreds of...