CVE-2004-0608: The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000...

Security readout for executives and security teams

This is a legacy remote code execution flaw in Unreal Engine networking used by several older games. A malicious UDP query with an overly long secure-query value can corrupt memory and potentially run code on an exposed vulnerable server. The main business risk is compromise of legacy game or community servers, not typical enterprise applications. Exposure is most likely where old Unreal Engine-based multiplayer servers remain reachable over UDP. Relevant assets include listed titles at or below affected versions. Modern systems are only implicated if they still host these legacy services or package vulnerable game server binaries. Prioritize if the organization hosts public legacy game servers or community infrastructure. For most enterprises, urgency is limited unless such servers exist. Any confirmed internet-facing vulnerable server should be patched, isolated, or retired promptly because the impact is remote code execution. Mitigation focus: Inventory exposed servers running the listed Unreal Engine-based games.; Upgrade Unreal Tournament 2004 to 3236 or later where applicable.; Check vendor or distribution advisories for fixes for each affected title..

Prepared

Jun 30, 2026, 05:11 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.