CVEvulnerability
CVE-2014-8518
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2014-10-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-255
Description
The (1) Removable Media and (2) CD and DVD encryption offsite access options (formerly Endpoint Encryption for Removable Media or EERM) in McAfee File and Removable Media Protection (FRP) 4.3.0.x, and Endpoint Encryption for Files and Folders (EEFF) 3.2.x through 4.2.x, uses a hard-coded salt, which makes it easier for local users to obtain passwords via a brute force attack.
Affected configurations
• mcafee endpoint encryption for files and folders 3.2.0.0
• mcafee endpoint encryption for files and folders 3.2.1.0
• mcafee endpoint encryption for files and folders 3.2.2.0
• mcafee endpoint encryption for files and folders 3.2.4.1
• mcafee endpoint encryption for files and folders 3.2.5.0
• mcafee endpoint encryption for files and folders 3.2.6
• mcafee endpoint encryption for files and folders 3.2.6.3
• mcafee endpoint encryption for files and folders 3.2.7
• mcafee endpoint encryption for files and folders 3.2.7.0
• mcafee endpoint encryption for files and folders 3.2.8
• mcafee endpoint encryption for files and folders 3.2.9.0
• mcafee endpoint encryption for files and folders 4.0.0
• mcafee endpoint encryption for files and folders 4.0.0.0
• mcafee endpoint encryption for files and folders 4.0.1
• mcafee endpoint encryption for files and folders 4.0.1.0
• mcafee endpoint encryption for files and folders 4.1.0
• mcafee endpoint encryption for files and folders 4.1.1
• mcafee endpoint encryption for files and folders 4.2.0
• mcafee file and removable media protection 4.3.0
• mcafee file and removable media protection 4.3.0.224
• mcafee file and removable media protection 4.3.0.243
Related
Weakness · not in database (1)
References
- https://kc.mcafee.com/corporate/index?page=content&id=SB10089 Patch, Vendor Advisory
- https://kc.mcafee.com/corporate/index?page=content&id=SB10089 Patch, Vendor Advisory