CVE-2024-43488CWE-306

Visual Studio Code extension for Arduino Remote Code Execution Vulnerability

High · published October 8, 2024

CVSS v3.1
8.8
EPSS
1%
Percentile
68.6
In the wild
Unconfirmed
What it is

Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.01227 · 68.6th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2024-10-08T17:36Z
EPSS history
Timeline
  • 08 OCT 17:36Z
    Visual Studio Code extension for Arduino Remote Code Execution Vulnerability
    cvelistv5