CVE-2024-43488: Visual Studio Code extension for Arduino Remote Code Execution Vulnerability
8.8
CVSS
Description
Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector.
Classification
CVE ID: CVE-2024-43488
CVSS Base Severity: HIGH
CVSS Base Score: 8.8
Affected Products
Vendor: Microsoft
Product: Visual Studio Code
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.1% (probability of being exploited)
EPSS Percentile: 43.01% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)