p PatchFirst

CVE-2013-6427

CVE-2013-6427

This page contains facts from public vulnerability sources. Check the original advisory before updating.

upgrade.py in the hp-upgrade service in HP Linux Imaging and Printing (HPLIP) 3.x through 3.13.11 launches a program from an http URL, which allows man-in-the-middle attackers to execute arbitrary code by gaining control over the client-server data stream.

EPSS 4.0% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • hplip Debian:12

    Affected ranges
    • ECOSYSTEM: < 3.13.11-2

    Update to 3.13.11-2

  • hplip Debian:13

    Affected ranges
    • ECOSYSTEM: < 3.13.11-2

    Update to 3.13.11-2

  • hplip Debian:14

    Affected ranges
    • ECOSYSTEM: < 3.13.11-2

    Update to 3.13.11-2

Original sources

Check your server →