HTTP: Microsoft Visual Studio Code Remote-Containers Extension Remote Code Execution
This signature detects attempts to exploit a known vulnerability against Microsoft Visual Studio Code. A successful attack can lead to arbitrary code execution.
Extended Description
Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability
Affected Products
Microsoft remote_development
References
CVE: CVE-2021-27083
Short Name
HTTP:STC:MS-VSCODE-RC-EXT-RCE
Severity
Critical
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2021-27083 Code Execution Extension Microsoft Remote Remote-Containers Studio Visual
Release Date
03/31/2021
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3728
False Positive
Unknown
Vendors
Microsoft
CVSS Score
9.3