Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

arduino / create_agent CVEs

Beta · best-effort

5 CVEs tagged to arduino / create_agent — 0 Critical, 2 High, 3 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to arduino vendor archive

CVE-2023-49296

Published Dec 13, 2023

The Arduino Create Agent allows users to use the Arduino Create applications to upload code to any USB connected Arduino board directly from the browser. A vulnerability in versio…

CVSS 6.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2023-43801

Published Oct 18, 2023

Arduino Create Agent is a package to help manage Arduino development. This vulnerability affects the endpoint `/v2/pkgs/tools/installed` and the way it handles plugin names suppli…

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2023-43800

Published Oct 18, 2023

Arduino Create Agent is a package to help manage Arduino development. The vulnerability affects the endpoint `/v2/pkgs/tools/installed`. A user who has the ability to perform HTTP…

CVSS 7.3 · High

Vendor/product tagsBeta · best-effort

CVE-2023-43803

Published Oct 18, 2023

Arduino Create Agent is a package to help manage Arduino development. This vulnerability affects the endpoint `/v2/pkgs/tools/installed` and the way it handles plugin names suppli…

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2023-43802

Published Oct 18, 2023

Arduino Create Agent is a package to help manage Arduino development. This vulnerability affects the endpoint `/upload` which handles request with the `filename` parameter. A user…

CVSS 7.1 · High

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1