Remote Code Execution Vulnerability in HP Point of Sale OLE Drivers

CVE-2014-7890

Summary

The OLE Point of Sale (OPOS) drivers for HP Point of Sale systems prior to version 1.13.003 are susceptible to a remote code execution vulnerability. Attackers can exploit this weakness via specially crafted vectors involving the OPOSToneIndicator.ocx component. This poses significant risk for systems utilizing POS keyboards and associated magnetic stripe readers (MSR) as it allows malicious entities to execute arbitrary code, potentially leading to unauthorized access and control of affected systems.

References