CVE-2014-7892: Critical severity hp ole point of sale driver vulnerability
The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSMSR.ocx for Mini MSR magnetic stripe readers, Retail Integrated Dual-Head MSR magnetic stripe readers, Integrated Single Head MSR w/o SRED magnetic stripe readers, Integrated Single Head w/o MSR SRED magnetic stripe readers, RP7 Single Head MSR w/o SRED magnetic stripe readers, POS keyboards, and POS keyboards with MSR, aka ZDI-CAN-2508.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-7892?
CVE-2014-7892 is classified as a critical vulnerability, allowing remote code execution on affected systems.
How do I fix CVE-2014-7892?
To fix CVE-2014-7892, upgrade the OLE Point of Sale driver to version 1.13.003 or later.
Which systems are affected by CVE-2014-7892?
CVE-2014-7892 affects OLE Point of Sale drivers prior to version 1.13.003 on HP Point of Sale Windows PCs.
What types of attacks can exploit CVE-2014-7892?
CVE-2014-7892 can be exploited by remote attackers to execute arbitrary code through malicious OPOSMSR.ocx manipulations.
Is the HP Integrated Single Head MSR w/o SRED affected by CVE-2014-7892?
No, the HP Integrated Single Head MSR w/o SRED is not affected by CVE-2014-7892.