Since you're using whereis to check if the remote system if vulnerable, I think would be more reliable to use the whereis output to dynamically get the path to the cupsctl binary, instead of hardcoding it as a module constant.