HP’s taking a turn at the new firmware game..

Topic

New Reply

https://www.bleepingcomputer.com/news/security/hp-fixes-bug-letting-attackers-overwrite-firmware-in-over-200-models/

Consider the potential of the POS tills listed owned with this sort of exploit handling your card data..

3 users thanked author for this post.

alejr, Kirsty, Cybertooth

Reply | Quote

Replies

First Lenovo now HP.

Reply | Quote

oldguy wrote:

POS tills

FYI for those who don’t know, POS stands for Point Of Sale and refers to the PC’s used to ring up your purchases (which also includes the self-checkout systems a lot of stores now use.)

I know this because one of my jobs as an IT contractor was to visit various retail stores and update their POS systems.

This particular vulnerability is a big pretty big deal because lots of retail POS system owners (especially in small “local” businesses) aren’t able/willing to spend the money necessary to have their systems “regularly” serviced/maintained.

2 users thanked author for this post.

NetDef, Kirsty

Reply | Quote

I feel this so much.  I took on a couple small storefront clients several years ago and the same pattern.  Plus, the inexpensive (relatively – it was not cheap in cost) software they used was  . . .  how to say it politely?  “Not well written.”

~ Group "Weekend" ~

Reply | Quote

Just for consideration, (mainly as it won’t affect us… directly, anyway…)

Wonders if the same escapade here could be “useful” in the POS environment..

https://nvd.nist.gov/vuln/detail/CVE-2022-1467

Hmm.

Reply | Quote

NetDef wrote:

I feel this so much.  I took on a couple small storefront clients several years ago and the same pattern.  Plus, the inexpensive (relatively – it was not cheap in cost) software they used was  . . .  how to say it politely?  “Not well written.”

Heh heh, it sounds like that POS software was a POS.  😉

(Sorry, couldn’t resist!)

 

Keep Running Windows 7 Safely for Years to Come  
Make Windows 10 look and work like Windows 7

4 users thanked author for this post.

wavy, steeviebops, SueW, IT Manager Geek

Reply | Quote