{"vulnerability": "CVE-2024-43488", "sightings": [{"uuid": "76b21ada-b7a4-49dc-8bcd-51b3b5696485", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43488", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1390", "content": "", "creation_timestamp": "2024-10-09T04:00:00.000000Z"}, {"uuid": "d6d8fcf7-9469-42db-bfc7-a8ca4749fc29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43488", "type": "seen", "source": "https://www.thezdi.com/blog/2024/10/8/the-october-2024-security-update-review", "content": "", "creation_timestamp": "2024-10-08T17:54:47.000000Z"}, {"uuid": "fa6ead10-799c-4779-b12a-d814036fdc79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43488", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18396", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-43488\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)\n\ud83d\udd39 Description: Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector.\n\ud83d\udccf Published: 2024-10-08T17:36:19.468Z\n\ud83d\udccf Modified: 2025-06-16T02:45:15.399Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43488", "creation_timestamp": "2025-06-16T03:35:27.000000Z"}, {"uuid": "47eff563-38af-4880-bce3-8abd0a8542fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43488", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2687", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-43488\n\ud83d\udd39 Description: Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector.\n\ud83d\udccf Published: 2024-10-08T17:36:19.468Z\n\ud83d\udccf Modified: 2025-01-23T01:39:34.702Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43488", "creation_timestamp": "2025-01-23T02:02:34.000000Z"}]}