CVE-2014-7894

EPSS 30.08%
Veröffentlicht 09.03.2015 17:59:06
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle hp-security-alert@hp.com
Teams Watchlist Login
Unerledigt Login

The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSPOSPrinter.ocx for PUSB Thermal Receipt printers, SerialUSB Thermal Receipt printers, Hybrid POS printers with MICR, Value PUSB Receipt printers, and Value Serial/USB Receipt printers, aka ZDI-CAN-2506.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Hp ≫ Ole Point Of Sale Driver Version <= 1.13.001

   Hp ≫ Hybrid Pos Printer With Micr Us Fk184aa Version-
   Hp ≫ Pusb Thermal Receipt Printer F7m67aa Version-
   Hp ≫ Pusb Thermal Receipt Printer Fk224aa Version-
   Hp ≫ Serialusb Thermal Receipt Printer Bm476aa Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	30.08%	0.965

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

http://www.securitytracker.com/id/1031840

https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04583185

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2014-7894

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-7894

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-7894

EUVD