Man-in-the-middle through broken SSL certificate verification

Summary

A logic flaw in the ssl sysmodule made it possible to provide a forged server certificate to applications. This would allow an attacker to read and/or modify traffic that is transmitted between the console and a server, which can leak secret information and opens up new attack vectors to the system. All applications that use the nn::ssl::Context::ImportServerPki function were affected.

More details about the vulnerability can be found here: https://reversing.live/sslbypass.html