CVE-2013-6040 describes a critical vulnerability in MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls prior to version 4.0, allowing arbitrary code execution through specially crafted HTML documents. This high-severity flaw (CVSS 8.1) has a network attack vector with high impact on confidentiality, integrity, and availability, despite high attack complexity. While not listed on the KEV catalog, proof-of-concept exploits are publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:mw6tech:aztec_activex_control:-:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:mw6tech:datamatrix_activex_control:-:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:mw6tech:maxicode_activex_control:-:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.