Back to CVE Browser

CVE-2014-7891

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1060%

EPSS Percentile36.77th

PublishedMar 9, 2015

Last ModifiedMay 6, 2026

Vulnerability Description

The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSPOSKeyboard.ocx for POS keyboards and POS keyboards with MSR, aka ZDI-CAN-2509.

Affected Platforms (CPE)

📦

Hp

Ole Point Of Sale Driver

<= 1.13.001

References & Advisories

🔗 http://www.securitytracker.com/id/1031840

🔗 https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04583185

🔗 http://www.securitytracker.com/id/1031840

🔗 https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04583185

Related Vulnerabilities

CVE-2014-788810.0

The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary c...

CVE-2014-788910.0

The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary c...

CVE-2014-789010.0

The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary c...

CVE-2014-789210.0

The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary c...