What’s Vulnerable › Vulnerabilities

CVE-2017-14378

• Severity: critical (CVSS 10.0 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-11-29 · updated 2026-06-17

Description

EMC RSA Authentication Agent API 8.5 for C and RSA Authentication Agent SDK 8.6 for C allow attackers to bypass authentication, aka an "Error Handling Vulnerability."

Affected products

• EMC Rsa Authentication Agent Api For C: 8.5
• EMC Rsa Authentication Agent Sdk For C: 8.6

References

• http://seclists.org/fulldisclosure/2017/Nov/48
• http://www.securityfocus.com/bid/101979
• http://www.securitytracker.com/id/1039877
• http://seclists.org/fulldisclosure/2017/Nov/48
• http://www.securityfocus.com/bid/101979
• http://www.securitytracker.com/id/1039877

Get alerted when CVE-2017-14378 or the next vulnerability affects your stack