CVE-2014-8518: mcafee endpoint_encryption_for_files_and_folders Credentials Management Errors
Vulnerability summary
CVE-2014-8518 is a low (CVSS 2.1) Credentials Management Errors vulnerability in mcafee endpoint_encryption_for_files_and_folders. EPSS estimates a 0.20% chance of exploitation in the next 30 days, higher than 9.1% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 0 · Duplicates 1Timeline
- 29-10-2014PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The (1) Removable Media and (2) CD and DVD encryption offsite access options (formerly Endpoint Encryption for Removable Media or EERM) in McAfee File and Removable Media Protection (FRP) 4.3.0.x, and Endpoint Encryption for Files and Folders (EEFF) 3.2.x through 4.2.x, uses a hard-coded salt, which makes it easier for local users to obtain passwords via a brute force attack.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.20%
Chance of exploitation in the next 30 days
Percentile
9%
Versus all other CVEs
30-day change
0.00 pp
From 0.20% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Mcafee2 products
- endpoint_encryption_for_files_and_folders3.2.0.0 | 3.2.1.0 | 3.2.2.0 | 3.2.4.1 | 3.2.5.0 | 3.2.6 | 3.2.6.3 | 3.2.7 | 3.2.7.0 | 3.2.8 | 3.2.9.0 | 4.0.0 | 4.0.0.0 | 4.0.1 | 4.0.1.0 | 4.1.0 | 4.1.1 | 4.2.0
- file_and_removable_media_protection4.3.0 | 4.3.0.224 | 4.3.0.243
1 vendor · 2 products