Motorola Scanner SDK vulnerabilities

2 CVEs affecting Motorola Scanner SDK, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-1496, published 2015-02-16.

More from Motorola.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-1495, published 2015-02-16. Medium severity, CVSS 6.8. EPSS: 3.3% chance of exploitation in the next 30 days. Multiple stack-based buffer overflows in Motorola Scanner SDK allow remote attackers to execute arbitrary code via a crafted string to the Open method in (1) IOPOSScanner.ocx or (2) IOPOSScale.ocx.
• CVE-2015-1496, published 2015-02-16. High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days. Motorola Scanner SDK uses weak permissions for (1) CoreScanner.exe, (2) rsmdriverproviderservice.exe, and (3) ScannerService.exe, which allows local users to gain privileges via unspecified vectors.