Microsoft · Visual Studio Code Extension For Arduino · CVE-2024-43488
**Name of the Vulnerable Software and Affected Versions**
Visual Studio Code extension for Arduino (affected versions not specified)
**Description**
The issue is related to missing authentication for a critical function in the Visual Studio Code extension for Arduino, allowing an unauthenticated attacker to perform remote code execution through a network attack vector. This could enable a remote attacker to execute arbitrary code.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.