CVE-2014-7889

EPSS 28.81%
Veröffentlicht 09.03.2015 17:59:01
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle hp-security-alert@hp.com
Teams Watchlist Login
Unerledigt Login

The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSLineDisplay.ocx for Retail RP7 VFD Customer Display monitors, Retail Integrated 2x20 Display monitors, Retail Integrated 2x20 Complex monitors, POS Pole Display monitors, Graphical POS Pole Display monitors, and LCD Pole Display monitors, aka ZDI-CAN-2511.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Hp ≫ Ole Point Of Sale Driver Version <= 1.13.001

   Hp ≫ Graphical Pos Pole Display Qz704aa
   Hp ≫ Lcd Pole Display F7a93aa
   Hp ≫ Pos Pole Display Fk225aa
   Hp ≫ Retail Integrated 2x20 Complex G7g29aa
   Hp ≫ Retail Integrated 2x20 Display G6u79aa
   Hp ≫ Retail Rp7 Vfd Customer Display Qz701aa

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	28.81%	0.964

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

http://www.securitytracker.com/id/1031840

https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04583185

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2014-7889

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-7889

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-7889

EUVD