CVE-2024-43488
Visual Studio Code extension for Arduino Remote Code Execution Vulnerability
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Visual Studio Code extension for Arduino Remote Code Execution Vulnerability
| Assigner | microsoft |
| Reserved | 2024-08-14 |
| Published | 2024-10-08 |
| Updated | 2024-10-17 |
Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector.
| CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
CWE-306: Missing Authentication for Critical Function
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43488 (Visual Studio Code extension for Arduino Remote Code Execution Vulnerability)
