CVE-2014-7889

2015-03-0917:59:01

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

Low

EPSS

0.952

Percentile

99.4%

JSON

The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSLineDisplay.ocx for Retail RP7 VFD Customer Display monitors, Retail Integrated 2x20 Display monitors, Retail Integrated 2x20 Complex monitors, POS Pole Display monitors, Graphical POS Pole Display monitors, and LCD Pole Display monitors, aka ZDI-CAN-2511.

Affected configurations

Nvd

Node

hpole_point_of_sale_driverRange≤1.13.001

AND

hpgraphical_pos_pole_display_qz704aa

hplcd_pole_display_f7a93aa

hppos_pole_display_fk225aa

hpretail_integrated_2x20_complex_g7g29aa

hpretail_integrated_2x20_display_g6u79aa

hpretail_rp7_vfd_customer_display_qz701aa

VendorProductVersionCPE
hpole_point_of_sale_driver*cpe:2.3:a:hp:ole_point_of_sale_driver:*:*:*:*:*:*:*:*
hpgraphical_pos_pole_display_qz704aa*cpe:2.3:h:hp:graphical_pos_pole_display_qz704aa:*:*:*:*:*:*:*:*
hplcd_pole_display_f7a93aa*cpe:2.3:h:hp:lcd_pole_display_f7a93aa:*:*:*:*:*:*:*:*
hppos_pole_display_fk225aa*cpe:2.3:h:hp:pos_pole_display_fk225aa:*:*:*:*:*:*:*:*
hpretail_integrated_2x20_complex_g7g29aa*cpe:2.3:h:hp:retail_integrated_2x20_complex_g7g29aa:*:*:*:*:*:*:*:*
hpretail_integrated_2x20_display_g6u79aa*cpe:2.3:h:hp:retail_integrated_2x20_display_g6u79aa:*:*:*:*:*:*:*:*
hpretail_rp7_vfd_customer_display_qz701aa*cpe:2.3:h:hp:retail_rp7_vfd_customer_display_qz701aa:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	ole_point_of_sale_driver	*	cpe:2.3:a:hp:ole_point_of_sale_driver::::::::
hp	graphical_pos_pole_display_qz704aa	*	cpe:2.3:h:hp:graphical_pos_pole_display_qz704aa::::::::
hp	lcd_pole_display_f7a93aa	*	cpe:2.3:h:hp:lcd_pole_display_f7a93aa::::::::
hp	pos_pole_display_fk225aa	*	cpe:2.3:h:hp:pos_pole_display_fk225aa::::::::
hp	retail_integrated_2x20_complex_g7g29aa	*	cpe:2.3:h:hp:retail_integrated_2x20_complex_g7g29aa::::::::
hp	retail_integrated_2x20_display_g6u79aa	*	cpe:2.3:h:hp:retail_integrated_2x20_display_g6u79aa::::::::
hp	retail_rp7_vfd_customer_display_qz701aa	*	cpe:2.3:h:hp:retail_rp7_vfd_customer_display_qz701aa::::::::