CVE-2014-7897

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2014-7897
The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSScanner.ocx for Imaging Barcode scanners, Linear Barcode scanners, Presentation Barcode scanners, Retail Integrated Barcode scanners, Wireless Barcode scanners, and 2D Value Wireless scanners.

10.0 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://www.securitytracker.com/id/1031840
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04583185 Vendor Advisory
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04583185 Vendor Advisory
http://www.securitytracker.com/id/1031840
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04583185 Vendor Advisory
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04583185 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:hp:ole_point_of_sale_driver:*:*:*:*:*:*:*:*
OR cpe:2.3:h:hp:2d_value_wireless_scanner_k3l28aa:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:imaging_barcode_scanner_bw868aa:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:linear_barcode_scanner_qy405aa:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:presentation_barcode_scanner_qy439aa:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:retail_integrated_barcode_scanner_e1l07aa:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:wireless_barcode_scanner_e6p34aa:*:*:*:*:*:*:*:*
History

21 Nov 2024, 02:18

Type Values Removed Values Added
References () http://www.securitytracker.com/id/1031840 - () http://www.securitytracker.com/id/1031840 -
References () https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04583185 - Vendor Advisory () https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04583185 - Vendor Advisory
Information

Published : 2015-03-09 17:59

Updated : 2024-11-21 02:18

NVD link : CVE-2014-7897

Mitre link : CVE-2014-7897

CVE.ORG link : CVE-2014-7897

JSON object : View

Products Affected

hp

  • imaging_barcode_scanner_bw868aa
  • presentation_barcode_scanner_qy439aa
  • retail_integrated_barcode_scanner_e1l07aa
  • ole_point_of_sale_driver
  • wireless_barcode_scanner_e6p34aa
  • 2d_value_wireless_scanner_k3l28aa
  • linear_barcode_scanner_qy405aa
CWE
NVD-CWE-noinfo