CVE-2024-43488

Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - secure@microsoft.com

Published

2024-10-08

Last modified

2026-08-19

Weaknesses

CWE-306

Affected products

• Visual Studio Code (Microsoft)

References

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43488