← Database

CVE-2024-43488

HIGH CVSS: 8.8 Published: 2024-10-08 Modified: 2026-06-17

Description

Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector.

Affected Platforms

Microsoft Visual Studio Code

Weakness Type

CWE-306, NVD-CWE-noinfo

References