CVE-2014-7888

Current Description

The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSMICR.ocx for PUSB Thermal Receipt printers, SerialUSB Thermal Receipt printers, Hybrid POS printers with MICR, Value PUSB Receipt printers, and Value Serial/USB Receipt printers, aka ZDI-CAN-2512.

Basic Data

Published	March 09, 2015
Last Modified	October 09, 2019
Assigner	cve@mitre.org
Data Type	CVE
Data Format	MITRE
Data Version	4.0
Problem Type	NVD-CWE-noinfo
CVE Data Version	4.0

Base Metric V2

CVSS 2 - Version	2.0
CVSS 2 - Vector String	AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS 2 - Access Vector	NETWORK
CVSS 2 - Access Complexity	LOW
CVSS 2 - Authentication	NONE
CVSS 2 - Confidentiality Impact	COMPLETE
CVSS 2 - Availability Impact	COMPLETE
CVSS 2 - Base Score	10.0
Severity	HIGH
Exploitability Score	10.0
Impact Score	10.0
Obtain All Privilege	false
Obtain User Privilege	false
Obtain Other Privilege	false

Base Metric V3

No data provided.

Configurations

AND

OR - Configuration 1

Cpe Version	Part	Vendor	Product	Version	Update	Edition	Language	SW Edition	Target SW	Target HW	Other	Version Start Including	Version End Including	Version Start Excluding	Version End Excluding
2.3	Application	Hp	Ole Point Of Sale Driver	*	*	*	*	*	*	*	*		1.13.001

OR Running on/with:

Cpe Version	Part	Vendor	Product	Version	Update	Edition	Language	SW Edition	Target SW	Target HW	Other
2.3	Hardware	Hp	Hybrid Pos Printer With Micr Us Fk184aa	-	*	*	*	*	*	*	*
2.3	Hardware	Hp	Pusb Thermal Receipt Printer F7m67aa	-	*	*	*	*	*	*	*
2.3	Hardware	Hp	Pusb Thermal Receipt Printer Fk224aa	-	*	*	*	*	*	*	*
2.3	Hardware	Hp	Serialusb Thermal Receipt Printer Bm476aa	-	*	*	*	*	*	*	*
2.3	Hardware	Hp	Value Serial/usb Receipt Printer F7m66aa	-	*	*	*	*	*	*	*

Vulnerable Software List

Vendor	Product	Versions
Hp	Ole Point Of Sale Driver	*

References

Name	Source	URL	Tags
1031840	http://www.securitytracker.com/id/1031840	SECTRACK
SSRT101696	https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04583185	HP	Vendor Advisory