CVE-2014-7891: The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers...

Security readout for executives and security teams

This issue affects HP Windows point-of-sale PCs using older OPOS drivers. A remote attacker could make the vulnerable POS keyboard control component run arbitrary code. For a retailer, that means compromised checkout endpoints and possible disruption or follow-on data exposure if affected driver versions remain deployed. Exposure is likely limited to HP Point of Sale Windows PCs with OPOS drivers earlier than 1.13.003, especially systems using POS keyboards or keyboard/MSR peripherals. Generic Windows systems or non-HP POS stacks are not identified as affected in the supplied sources. Treat this as a high-priority legacy POS risk if HP Windows checkout systems are still in use. The main business concern is remote code execution on payment-adjacent endpoints. If those systems are retired or patched, residual urgency is lower. Mitigation focus: Inventory HP POS Windows PCs and installed OPOS driver versions.; Update affected OPOS drivers to version 1.13.003 or later where available.; Review HP advisory SSRT101693 for supported remediation guidance..

Prepared

Jun 13, 2026, 22:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.