CVE-2017-14378

—

CVSS 3.0

10.0 critical

EPSS

3%p87

Published

Nov 29, 2017 (Nov 29, 2017)

Modified

Jun 17, 2026

Description

EMC RSA Authentication Agent API 8.5 for C and RSA Authentication Agent SDK 8.6 for C allow attackers to bypass authentication, aka an "Error Handling Vulnerability."

Vendors: emc
Products: rsa authentication agent api for c, rsa authentication agent sdk for c
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.0%)

In the news1 stories

RSA Authentication SDK affected by two critical vulnerabilities, patch it now!

Security AffairsDec 4, 08:15 UTC · Dec 4, 2017Vulnerability CVE-2017-14377 CVE-2017-14378