CVE-2015-2987: Type74 ED before 4.0 misuses 128-bit ECB encryption for small files, which makes it easier for attackers to...

Security readout for executives and security teams

Type74 ED versions before 4.0 used ECB encryption in a way that could weaken protection for very small encrypted files. The main business risk is loss of confidentiality for small protected files, not system takeover. Public evidence in the bundle is limited, so prioritize confirming whether the product is present. Exposure appears limited to environments using Type74 ED before version 4.0, especially where it encrypted very small files. The affected-product metadata is incomplete, so validation should rely on asset inventory, installed version checks, and review of legacy encrypted files. Treat this as a targeted legacy data-confidentiality review. It is not currently evidenced as actively exploited, but small encrypted secrets from old Type74 ED use may need replacement or re-encryption if the product was deployed. Mitigation focus: Check vendor guidance for Type74 ED and the referenced advisories.; Upgrade Type74 ED if any installation is older than 4.0.; Re-encrypt sensitive small files with a current, reviewed encryption tool..

Prepared

Jun 13, 2026, 22:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.