What is the CVSS score of CVE-2014-8518?

CVE-2014-8518 has a CVSS 2.0 base score of 2.1 (Low). CVSS vector: AV:L/AC:L/Au:N/C:P/I:N/A:N. EPSS exploitation probability: 0.0%.

Is there a patch available for CVE-2014-8518?

Yes, a patch is available for CVE-2014-8518. Update the affected software to the latest version immediately.

Endpoint Encryption For Files And Folders CVE-2014-8518

LOW

Credentials Management Errors (CWE-255)

2014-10-29 cve@mitre.org

Authentication Bypass Endpoint Encryption For Files And Folders File And Removable Media Protection

2.1

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

2.1 LOW

AV:L/AC:L/Au:N/C:P/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:L/Au:N/C:P/I:N/A:N

Attack Vector

Local

Attack Complexity

Low

Confidentiality

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

Oct 29, 2014 - 14:55 cve.org

LOW 2.1

DescriptionCVE.org

The (1) Removable Media and (2) CD and DVD encryption offsite access options (formerly Endpoint Encryption for Removable Media or EERM) in McAfee File and Removable Media Protection (FRP) 4.3.0.x, and Endpoint Encryption for Files and Folders (EEFF) 3.2.x through 4.2.x, uses a hard-coded salt, which makes it easier for local users to obtain passwords via a brute force attack.

AnalysisAI

The (1) Removable Media and (2) CD and DVD encryption offsite access options (formerly Endpoint Encryption for Removable Media or EERM) in McAfee File and Removable Media Protection (FRP) 4.3.0.x,. Rated low severity (CVSS 2.1), this vulnerability is low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-255. The (1) Removable Media and (2) CD and DVD encryption offsite access options (formerly Endpoint Encryption for Removable Media or EERM) in McAfee File and Removable Media Protection (FRP) 4.3.0.x, and Endpoint Encryption for Files and Folders (EEFF) 3.2.x through 4.2.x, uses a hard-coded salt, which makes it easier for local users to obtain passwords via a brute force attack. Affected products include: Mcafee Endpoint Encryption For Files And Folders, Mcafee File And Removable Media Protection. Version information: through 4.2..

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.