PT-2015-3944 · Hewlett Packard · Hp Pos Usb Line Display Opos Drivers+1

Published 2015-03-09 · Updated 2019-10-09 · CVE-2014-7889

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Hewlett-Packard POS USB Line Display OPOS Drivers versions prior to 1.13.003

Description The issue allows remote attackers to execute arbitrary code via vectors involving OPOSLineDisplay.ocx for various Retail and POS monitors.

Recommendations For versions prior to 1.13.003, update to version 1.13.003 or later to resolve the issue.

Fix

Related Identifiers

CVE-2014-7889

ZDI-15-101

Affected Products

Hp Pos Usb Line Display Opos Drivers

Oposlinedisplay.Ocx

References · 4

• https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04583185 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-15-101 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2014-7889 · Security Note
• http://securitytracker.com/id/1031840 · Note