What is the CVSS score of CVE-2013-0931?

CVE-2013-0931 has a CVSS 2.0 base score of 5.4 (Medium). CVSS vector: AV:A/AC:M/Au:N/C:P/I:P/A:P. EPSS exploitation probability: 0.1%.

Authentication Agent For Windows CVE-2013-0931

MEDIUM

Configuration (CWE-16)

2013-03-05 security_alert@emc.com

Microsoft Authentication Bypass Authentication Agent For Windows

5.4

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

5.4 MEDIUM

AV:A/AC:M/Au:N/C:P/I:P/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:A/AC:M/Au:N/C:P/I:P/A:P

Attack Vector

Adjacent

Attack Complexity

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Mar 05, 2013 - 22:03 cve.org

MEDIUM 5.4

DescriptionCVE.org

EMC RSA Authentication Agent 7.1.x before 7.1.2 on Windows does not enforce the Quick PIN Unlock timeout feature, which allows physically proximate attackers to bypass the passcode requirement for a screensaved session by entering a PIN after timeout expiration.

AnalysisAI

EMC RSA Authentication Agent 7.1.x before 7.1.2 on Windows does not enforce the Quick PIN Unlock timeout feature, which allows physically proximate attackers to bypass the passcode requirement for a. Rated medium severity (CVSS 5.4). No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-16. EMC RSA Authentication Agent 7.1.x before 7.1.2 on Windows does not enforce the Quick PIN Unlock timeout feature, which allows physically proximate attackers to bypass the passcode requirement for a screensaved session by entering a PIN after timeout expiration. Affected products include: Rsa Authentication Agent For Windows. Version information: before 7.1.2.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.