Security readout for executives and security teams
Plain-English summary
This CVE affects ArchiSteamFarm, a Steam automation tool. A remote Steam user could crash an affected ASF instance by sending a specially crafted chat message. It is primarily an availability issue: the sources state it does not expose passwords, run commands, or enable further exploitation. The vendor fixed it in version 4.3.1.0.
Executive priority
Treat this as a moderate availability issue. Prioritize patching if ASF supports revenue, operations, or always-on automation. The business risk is service disruption, not data breach, based on the supplied sources.
Technical view
ASF versions 4.3.0.0 through before 4.3.1.0 mishandle Steam chat input, producing a remotely triggerable denial of service. The sender need not be authorized in ASF, but must know the CommandPrefix. Sources note many setups keep the default prefix. CWE-20 and CVSS 6.5 indicate input validation with high availability impact.
Likely exposure
Exposure is limited to systems running affected ArchiSteamFarm versions with bots reachable through Steam chat. Risk is higher where the CommandPrefix remains default and bots are online. Organizations not using ASF, or already on 4.3.1.0 or later, are not indicated as affected by the supplied sources.
Exploitation context
The supplied sources do not show active exploitation, and the CVE is not listed as KEV. Exploitation requires only network reachability through Steam chat and knowledge of the command prefix, but the described outcome is a crash, not credential theft, command execution, or persistence.
Researcher notes
The advisory frames this as CWE-20 input validation in Steam chat command handling. The attacker is unauthenticated to ASF but needs the CommandPrefix. Evidence provided names the patch version and offline workaround, but does not provide evidence of exploitation in the wild.
Mitigation direction
- Upgrade ArchiSteamFarm to version 4.3.1.0 or later.
- If upgrade is delayed, set all bots OnlineStatus to 0, Offline.
- Review vendor advisory and release notes before operational rollout.
- Avoid assuming other mitigations unless confirmed by ASF guidance.
Validation and detection
- Inventory all ArchiSteamFarm instances and record exact versions.
- Confirm no instance runs version 4.3.0.0 through before 4.3.1.0.
- Check bot configuration for OnlineStatus when temporary workaround is required.
- Review service logs for unexpected ASF crashes around Steam chat activity.
- Confirm patched instances remain stable after normal bot operations.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-20: Exact CWE lookup
Use the exact CWE identifier as the starting point before reviewing related ATT&CK behavior. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupCVE-2021-32795 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Medium
- CVSS
- 6.5 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H2.24.2Primary CVE scoreVulnerability scoring details
Base CVSS 3.1 score
6.5MediumVector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H
Source materials
- CVE List V5 sourceCVE List V5
- https://github.com/JustArchiNET/ArchiSteamFarm/security/advisories/GHSA-5v34-4prm-9474CVE reference · x_refsource_CONFIRM
- https://github.com/JustArchiNET/ArchiSteamFarm/commit/4cd581ec041912cf199c5512fe6d1dcaec0594c0CVE reference · x_refsource_MISC
- https://steamcommunity.com/groups/archiasf/discussions/1/2935742047969570844/CVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.
Improper Input Validation
Improper Input Validation represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.