CVE-2014-8518: Low severity mcafee endpoint encryption for files and folders vulnerability

Published Oct 29, 2014

Updated

The (1) Removable Media and (2) CD and DVD encryption offsite access options (formerly Endpoint Encryption for Removable Media or EERM) in McAfee File and Removable Media Protection (FRP) 4.3.0.x, and Endpoint Encryption for Files and Folders (EEFF) 3.2.x through 4.2.x, uses a hard-coded salt, which makes it easier for local users to obtain passwords via a brute force attack.

Affected Software

21 affected components

McAfee Endpoint Encryption for Files and Folders=3.2.0.0

McAfee Endpoint Encryption for Files and Folders=3.2.1.0

McAfee Endpoint Encryption for Files and Folders=3.2.2.0

McAfee Endpoint Encryption for Files and Folders=3.2.4.1

McAfee Endpoint Encryption for Files and Folders=3.2.5.0

McAfee Endpoint Encryption for Files and Folders=3.2.6

McAfee Endpoint Encryption for Files and Folders=3.2.6.3

McAfee Endpoint Encryption for Files and Folders=3.2.7

McAfee Endpoint Encryption for Files and Folders=3.2.7.0

McAfee Endpoint Encryption for Files and Folders=3.2.8

McAfee Endpoint Encryption for Files and Folders=3.2.9.0

McAfee Endpoint Encryption for Files and Folders=4.0.0

McAfee Endpoint Encryption for Files and Folders=4.0.0.0

McAfee Endpoint Encryption for Files and Folders=4.0.1

McAfee Endpoint Encryption for Files and Folders=4.0.1.0

McAfee Endpoint Encryption for Files and Folders=4.1.0

McAfee Endpoint Encryption for Files and Folders=4.1.1

McAfee Endpoint Encryption for Files and Folders=4.2.0

McAfee File and Removable Media Protection=4.3.0

McAfee File and Removable Media Protection=4.3.0.224

McAfee File and Removable Media Protection=4.3.0.243

Remediation

Patch Available

https://kc.mcafee.com/corporate/index?page=content&id=SB10089

Event History

Oct 29, 2014

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-8518?

CVE-2014-8518 has been classified with a low severity due to the limited impact it poses.

How do I fix CVE-2014-8518?

To fix CVE-2014-8518, upgrade to the latest version of McAfee File and Removable Media Protection or Endpoint Encryption for Files and Folders.

What versions are affected by CVE-2014-8518?

CVE-2014-8518 affects McAfee Endpoint Encryption for Files and Folders versions 3.2.x to 4.2.x and McAfee File and Removable Media Protection version 4.3.0.

What type of vulnerability is CVE-2014-8518?

CVE-2014-8518 is a cryptographic vulnerability due to the use of a hard-coded salt.

Is CVE-2014-8518 exploitable remotely?

CVE-2014-8518 does not provide an exploit vector remotely, as the vulnerability requires local permissions to affect the system.