VIR Vulnerability Intelligence Relay

CVE-2013-6427

medium
Published 2013-12-09 · Modified 2026-04-29
CVSS v3
—
CVSS v2
6.8
VIR risk
6.8

Description

upgrade.py in the hp-upgrade service in HP Linux Imaging and Printing (HPLIP) 3.x through 3.13.11 launches a program from an http URL, which allows man-in-the-middle attackers to execute arbitrary code by gaining control over the client-server data stream.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2013-6427

OS impact
OSVersionStatusFixed in
debian debianbookwormfixed3.13.11-2
debian debianbullseyefixed3.13.11-2
debian debiansidfixed3.13.11-2
debian debiantrixiefixed3.13.11-2

Application impact
VendorProductVersionsFixed
hplinux_imaging_and_printing_project3.9.2
hplinux_imaging_and_printing_project3.9.4
hplinux_imaging_and_printing_project3.9.4b
hplinux_imaging_and_printing_project3.9.6
hplinux_imaging_and_printing_project3.9.8
hplinux_imaging_and_printing_project3.9.10
hplinux_imaging_and_printing_project3.9.12
hplinux_imaging_and_printing_project3.10.2
hplinux_imaging_and_printing_project3.10.5
hplinux_imaging_and_printing_project3.10.6
hplinux_imaging_and_printing_project3.10.9
hplinux_imaging_and_printing_project3.11.1
hplinux_imaging_and_printing_project3.11.3
hplinux_imaging_and_printing_project3.11.3a
hplinux_imaging_and_printing_project3.11.5
hplinux_imaging_and_printing_project3.11.7
hplinux_imaging_and_printing_project3.11.10
hplinux_imaging_and_printing_project3.11.12
hplinux_imaging_and_printing_project3.12.2
hplinux_imaging_and_printing_project3.12.4
hplinux_imaging_and_printing_project3.12.6
hplinux_imaging_and_printing_project3.12.9
hplinux_imaging_and_printing_project3.12.10
hplinux_imaging_and_printing_project3.12.11
hplinux_imaging_and_printing_project3.13.2
hplinux_imaging_and_printing_project3.13.3
hplinux_imaging_and_printing_project3.13.4
hplinux_imaging_and_printing_project3.13.5
hplinux_imaging_and_printing_project3.13.6
hplinux_imaging_and_printing_project3.13.7
hplinux_imaging_and_printing_project3.13.8
hplinux_imaging_and_printing_project3.13.9
hplinux_imaging_and_printing_project3.13.10

References

CWEs

CWE-94

Verify integrity in audit chain (admin only). AS-IS.