Rsa Authentication Agent For Windows vulnerabilities

2 CVEs affecting Rsa Authentication Agent For Windows, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-47856, published 2025-11-24.

More from Rsa.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-0931, published 2013-03-05. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. EMC RSA Authentication Agent 7.1.x before 7.1.2 on Windows does not enforce the Quick PIN Unlock timeout feature, which allows physically proximate attackers to bypass the passcode requirement for a…
• CVE-2024-47856, published 2025-11-24. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. In RSA Authentication Agent before 7.4.7, service paths and shortcut paths may be vulnerable to path interception if the path has one or more spaces and is not surrounded by quotation marks. An…