NetSight
low2.1

CVE-2014-8518

The (1) Removable Media and (2) CD and DVD encryption offsite access options (formerly Endpoint Encryption for Removable Media or EERM) in McAfee File and Remo…

Impact

The (1) Removable Media and (2) CD and DVD encryption offsite access options (formerly Endpoint Encryption for Removable Media or EERM) in McAfee File and Removable Media Protection (FRP) 4.3.0.x, and Endpoint Encryption for Files and Folders (EEFF) 3.2.x through 4.2.x, uses a hard-coded salt, which makes it easier for local users to obtain passwords via a brute force attack.

Affected products

VendorProductAffected versions
McafeeEndpoint Encryption For Files And Folders
Versions 3.2.0.0, 3.2.1.0, 3.2.2.0, 3.2.4.1, 3.2.5.0, 3.2.6
McafeeFile And Removable Media Protection
Versions 4.3.0, 4.3.0.224, 4.3.0.243

Weakness classification

References