CVE-2014-7893

2015-03-0917:59:05

web.nvd.nist.gov

cve-2014-7893

ole point of sale

opos drivers

windows

remote code execution

hp point of sale

security vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.952

Percentile

99.4%

JSON

The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSCheckScanner.ocx for PUSB Thermal Receipt printers, SerialUSB Thermal Receipt printers, Hybrid POS printers with MICR, Value PUSB Receipt printers, and Value Serial/USB Receipt printers, aka ZDI-CAN-2507.

Affected configurations

Nvd

Node

hpole_point_of_sale_driverRange≤1.13.001

AND

hphybrid_pos_printer_with_micr_us_fk184aa

hppusb_thermal_receipt_printer_f7m67aa

hppusb_thermal_receipt_printer_fk224aa

hpserialusb_thermal_receipt_printer_bm476aa

hpvalue_serial\/usb_receipt_printer_f7m66aa

VendorProductVersionCPE
hpole_point_of_sale_driver*cpe:2.3:a:hp:ole_point_of_sale_driver:*:*:*:*:*:*:*:*
hphybrid_pos_printer_with_micr_us_fk184aa*cpe:2.3:h:hp:hybrid_pos_printer_with_micr_us_fk184aa:*:*:*:*:*:*:*:*
hppusb_thermal_receipt_printer_f7m67aa*cpe:2.3:h:hp:pusb_thermal_receipt_printer_f7m67aa:*:*:*:*:*:*:*:*
hppusb_thermal_receipt_printer_fk224aa*cpe:2.3:h:hp:pusb_thermal_receipt_printer_fk224aa:*:*:*:*:*:*:*:*
hpserialusb_thermal_receipt_printer_bm476aa*cpe:2.3:h:hp:serialusb_thermal_receipt_printer_bm476aa:*:*:*:*:*:*:*:*
hpvalue_serial\/usb_receipt_printer_f7m66aa*cpe:2.3:h:hp:value_serial\/usb_receipt_printer_f7m66aa:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	ole_point_of_sale_driver	*	cpe:2.3:a:hp:ole_point_of_sale_driver::::::::
hp	hybrid_pos_printer_with_micr_us_fk184aa	*	cpe:2.3:h:hp:hybrid_pos_printer_with_micr_us_fk184aa::::::::
hp	pusb_thermal_receipt_printer_f7m67aa	*	cpe:2.3:h:hp:pusb_thermal_receipt_printer_f7m67aa::::::::
hp	pusb_thermal_receipt_printer_fk224aa	*	cpe:2.3:h:hp:pusb_thermal_receipt_printer_fk224aa::::::::
hp	serialusb_thermal_receipt_printer_bm476aa	*	cpe:2.3:h:hp:serialusb_thermal_receipt_printer_bm476aa::::::::
hp	value_serial\/usb_receipt_printer_f7m66aa	*	cpe:2.3:h:hp:value_serial\/usb_receipt_printer_f7m66aa::::::::