Current position >About Us
1. Switch System Vulnerabilities
The Switch system has two typical types of vulnerabilities: hardware vulnerabilities in the first generation chip and software protection defects in Switch2. The technical principles and scope of impact are as follows:
1. Chip level hardware vulnerabilities in the first generation Switch The core vulnerabilities in the first generation Switch stem from the Bootrom layer defects in the NVIDIA Tegra X1 chip.
. This vulnerability is located in the hardware code of the chip boot ROM and is an irreparable underlying vulnerability that affects all devices equipped with this chip. Hackers can bypass system security verification by injecting malicious code and directly load homemade firmware. Typical cases include: ShofEL2 hardware cracking: The fall0verflow team used this vulnerability to run Linux systems on Switch and demonstrated the operation of PS2 simulators, proving that chip level vulnerabilities can achieve complete system control. RCM mode vulnerability: By modifying the recovery mode of chip blocking, attackers can inject third-party systems, such as Team Xeuters SX OS cracking solution based on this principle. Clock glitch attack: By interfering with the chip clock frequency, bypassing the EMMC storage protection mechanism, and directly reading or modifying system files. This type of attack requires physical contact with the device, but the effect is thorough.2. Switch2 System Software and Protection Vulnerabilities Switch2s vulnerabilities mainly focus on system protection mechanisms and software stability, including: WiFi connection malicious BUG: When the first release model connects to WiFi names containing special characters (such as emoticons, non ASCII characters), it will get stuck in the search interface and force a restart.
. This issue stems from a defect in the systems handling of abnormal inputs and needs to be resolved by restoring factory settings or updating system patches. Current detection anti cracking mechanism: Switch2 has a built-in current monitoring function. If abnormal hardware modifications (such as soldering chips or external devices) are detected, a permanent ban mechanism will be triggered, causing the device to be unable to connect to the internet, access digital stores, or even start games. Although this mechanism effectively prevents cracking, the risk of false positives has sparked controversy among players. Breakthrough in ROP technology protection: Security researcher ret0.id utilizes ROP (Return Oriented Programming) technology to construct an attack chain through legitimate code fragments in system memory, successfully running custom content in the user area. Although currently limited to non core functional modifications, it has been proven that there are gaps in the protective wall of Switch2 that can be utilized.III. Differences in Vulnerability Impact and Repair. The vulnerabilities of the first generation chips are located at the hardware layer and cannot be fixed through software updates, resulting in long-term cracking risks.
; The vulnerabilities in Switch2 are mostly fixed through system updates (such as WiFi BUG patches), but the game between anti cracking mechanisms and ROP protection will continue to exist. Users should be aware that hardware cracking may cause device tampering, while software vulnerability exploitation may trigger Ban machine risks.