CVE-2014-7891
critical
CVSS v3
—
CVSS v2
10.0
VIR risk
10.0
Description
The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSPOSKeyboard.ocx for POS keyboards and POS keyboards with MSR, aka ZDI-CAN-2509.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: hp-security-alert@hp.com — https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04583185
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| hp | ole_point_of_sale_driver | {"endIncluding":"1.13.001"} | |
References
Verify integrity in audit chain (admin only). AS-IS.