Strix
26.1K

CVE-2014-8518

UnknownEPSS 0.20%

Last modified

CVE-2014-8518 is a vulnerability of currently unknown severity. The (1) Removable Media and (2) CD and DVD encryption offsite access options (formerly Endpoint Encryption for Removable Media or EERM) in McAfee File and Removable Media Protection (FRP) 4.3.0.x, and Endpoint Encryption for Files and Folders (EEFF) 3.2.x through 4.2.x, uses a hard-coded salt, which makes it easier for local users to obtain passwords via a brute force attack.. EPSS estimates a 0.20% chance of exploitation in the next 30 days.

Description

The (1) Removable Media and (2) CD and DVD encryption offsite access options (formerly Endpoint Encryption for Removable Media or EERM) in McAfee File and Removable Media Protection (FRP) 4.3.0.x, and Endpoint Encryption for Files and Folders (EEFF) 3.2.x through 4.2.x, uses a hard-coded salt, which makes it easier for local users to obtain passwords via a brute force attack.

Metrics

EPSS Probability
0.20%

9.8th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
McafeeEndpoint Encryption For Files And Folders3.2.0.0
McafeeEndpoint Encryption For Files And Folders3.2.1.0
McafeeEndpoint Encryption For Files And Folders3.2.2.0
McafeeEndpoint Encryption For Files And Folders3.2.4.1
McafeeEndpoint Encryption For Files And Folders3.2.5.0
McafeeEndpoint Encryption For Files And Folders3.2.6
McafeeEndpoint Encryption For Files And Folders3.2.6.3
McafeeEndpoint Encryption For Files And Folders3.2.7
McafeeEndpoint Encryption For Files And Folders3.2.7.0
McafeeEndpoint Encryption For Files And Folders3.2.8
McafeeEndpoint Encryption For Files And Folders3.2.9.0
McafeeEndpoint Encryption For Files And Folders4.0.0
McafeeEndpoint Encryption For Files And Folders4.0.0.0
McafeeEndpoint Encryption For Files And Folders4.0.1
McafeeEndpoint Encryption For Files And Folders4.0.1.0
McafeeEndpoint Encryption For Files And Folders4.1.0
McafeeEndpoint Encryption For Files And Folders4.1.1
McafeeEndpoint Encryption For Files And Folders4.2.0
McafeeFile And Removable Media Protection4.3.0
McafeeFile And Removable Media Protection4.3.0.224
McafeeFile And Removable Media Protection4.3.0.243

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2014-8518?
The (1) Removable Media and (2) CD and DVD encryption offsite access options (formerly Endpoint Encryption for Removable Media or EERM) in McAfee File and Removable Media Protection (FRP) 4.3.0.x, and Endpoint Encryption for Files and Folders (EEFF) 3.2.x through 4.2.x, uses a hard-coded salt, which makes it easier for local users to obtain passwords via a brute force attack.
How severe is CVE-2014-8518?
Severity scoring for CVE-2014-8518 is pending analysis. The EPSS model estimates a 0.20% probability of exploitation in the next 30 days.
How do I fix CVE-2014-8518?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2014-8518?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST