CVE-2014-8518: McAfee Endpoint Encryption For Files And Folders

Low severity, CVSS 2.1. EPSS: 0.2% chance of exploitation in the next 30 days.

The (1) Removable Media and (2) CD and DVD encryption offsite access options (formerly Endpoint Encryption for Removable Media or EERM) in McAfee File and Removable Media Protection (FRP) 4.3.0.x, and Endpoint Encryption for Files and Folders (EEFF) 3.2.x through 4.2.x, uses a hard-coded salt, which makes it easier for local users to obtain passwords via a brute force attack.

Affected products

• McAfee Endpoint Encryption For Files And Folders: version 3.2.0.0 only; version 3.2.1.0 only; version 3.2.2.0 only; version 3.2.4.1 only; version 3.2.5.0 only; version 3.2.6 only; …
• McAfee File And Removable Media Protection: version 4.3.0 only; version 4.3.0.224 only; version 4.3.0.243 only

Published 2014-10-29. Last modified 2026-06-17.