CVE-2013-4426
pyxtrlock before 0.1 uses an incorrect variable name, which allows physically proximate attackers...
pyxtrlock before 0.1 uses an incorrect variable name, which allows physically proximate attackers to bypass the lock screen via multiple failed authentication attempts, which trigger a crash.
Exploit likelihood
What each source reports
NVD Score used
pyxtrlock before 0.1 uses an incorrect variable name, which allows physically proximate attackers to bypass the lock screen via multiple failed authentication attempts, which trigger a crash.
- Record
CVE-2013-4426- CVSS 2.0
- 3.6 Low
AV:L/AC:L/Au:N/C:P/I:N/A:P - Updated
- 2026-11-02
CVE List No score
pyxtrlock before 0.1 uses an incorrect variable name, which allows physically proximate attackers to bypass the lock screen via multiple failed authentication attempts, which trigger a crash.
- Record
CVE-2013-4426- Updated
- 2026-11-02
EUVDEUVD-2013-4303 No score
pyxtrlock before 0.1 uses an incorrect variable name, which allows physically proximate attackers to bypass the lock screen via multiple failed authentication attempts, which trigger a crash.
- Record
EUVD-2013-4303- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rgfv-59fj-j4h6 No score
pyxtrlock before 0.1 uses an incorrect variable name, which allows physically proximate attackers...
pyxtrlock before 0.1 uses an incorrect variable name, which allows physically proximate attackers to bypass the lock screen via multiple failed authentication attempts, which trigger a crash.
- Record
GHSA-rgfv-59fj-j4h6- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-4426 is a low vulnerability (CVSS 3.6) in Leon Weber Pyxtrlock, published May 19, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 32nd percentile. No source names a fixed version.