CVE-2021-34170
📋 TL;DR
CVE-2021-34170 is a critical remote code execution vulnerability in Bandai Namco's Dark Souls III game for PC. Attackers can exploit this vulnerability to execute arbitrary code on a victim's system when they connect to malicious game servers. This affects all Dark Souls III PC players who play online.
💻 Affected Systems
- Bandai Namco FromSoftware Dark Souls III
📦 What is this software?
Dark Souls Iii by Fromsoftware
⚠️ Risk & Real-World Impact
Worst Case
Complete system compromise allowing attackers to install malware, steal data, or gain persistent access to the victim's computer.
Likely Case
Game crashes, system instability, or installation of game-specific malware/cheats that could lead to account compromise.
If Mitigated
Limited impact if proper network segmentation and endpoint protection are in place, though game functionality may be disrupted.
🎯 Exploit Status
Exploits have been circulating in gaming communities and require victims to connect to malicious game servers.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: Latest game update (check game launcher/Steam)
Vendor Advisory: https://www.bandainamcoent.com/
Restart Required: Yes
Instructions:
1. Launch Steam 2. Right-click Dark Souls III 3. Select Properties 4. Go to Updates 5. Ensure automatic updates are enabled 6. Verify game files integrity
🔧 Temporary Workarounds
Disable Online Play
windowsPlay in offline mode to prevent connection to malicious servers
Launch game -> Settings -> Network -> Set to Offline
Use Firewall Rules
windowsBlock Dark Souls III network traffic at firewall level
Windows Firewall: New Rule -> Program -> Path to DarkSoulsIII.exe -> Block
🧯 If You Can't Patch
- Play exclusively in offline mode
- Use a separate gaming VM or sandboxed environment
🔍 How to Verify
Check if Vulnerable:
Check if game is updated to latest version through Steam or game launcherCheck Version:
Steam: Right-click Dark Souls III -> Properties -> Updates -> Build IDVerify Fix Applied:
Verify game version matches latest patch notes from Bandai Namco📡 Detection & Monitoring
Log Indicators:
- Game crash logs with memory corruption errors
- Unexpected network connections from game process
Network Indicators:
- Unusual outbound connections from game to unknown IPs
- Game traffic to non-standard ports
SIEM Query:
process_name:"DarkSoulsIII.exe" AND (event_type:crash OR dest_ip:[malicious_ips])