« Volver al listado

CVE-2013-6040

Estado: ModificadaAlta (8.1)—

MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls before version 4.0 vulnerable to arbitrary code via a crafted HTML document. Latest versions (4.0) of MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls have resolved the issue

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Mw6tech — Aztec Activex ControlMw6tech — Datamatrix Activex ControlMw6tech — Maxicode Activex Control

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-6040",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2013-6040",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-09-05T14:24:52.213468Z"
        }
      }
    ],
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.1,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.2
      }
    ]
  },
  "affected": [
    {
      "source": "cret@cert.org",
      "affectedData": [
        {
          "vendor": "MW6 Tech",
          "product": "MW6 Aztec ActiveX Controls",
          "versions": [
            {
              "status": "affected",
              "version": "0.0",
              "lessThan": "4.0",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "MW6 Tech",
          "product": "MW6 DataMatrix ActiveX Controls",
          "versions": [
            {
              "status": "affected",
              "version": "0.0",
              "lessThan": "4.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "vendor": "MW6 Tech",
          "product": "MW6 MaxiCode ActiveX Controls",
          "versions": [
            {
              "status": "affected",
              "version": "0.0",
              "lessThan": "4.0",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2014-01-21T01:55:03.560",
  "references": [
    {
      "url": "http://www.exploit-db.com/exploits/31176",
      "tags": [
        "Exploit"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.exploit-db.com/exploits/31177",
      "tags": [
        "Exploit"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/219470",
      "tags": [
        "US Government Resource"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "https://www.mw6tech.com",
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.exploit-db.com/exploits/31176",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.exploit-db.com/exploits/31177",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/219470",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls before version 4.0 vulnerable to arbitrary code via a crafted HTML document. Latest versions (4.0) of MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls have resolved the issue"
    },
    {
      "lang": "es",
      "value": "Múltiples vulnerabilidades no especificadas en el MW6 Actec, DataMatrix, y los controles ActiveX MaxiCode que permiten a atacantes remotos ejecutar código arbitrario a través de un documento HTML manipulado."
    }
  ],
  "lastModified": "2026-06-16T23:59:56.113",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:mw6tech:aztec_activex_control:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "42AB1BA6-C714-44F0-B2AB-AB075EA073D9"
            },
            {
              "criteria": "cpe:2.3:a:mw6tech:datamatrix_activex_control:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AEB0A05D-4C5C-493E-85F3-BA2A62F6CB74"
            },
            {
              "criteria": "cpe:2.3:a:mw6tech:maxicode_activex_control:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9B95EC0C-1074-40BF-9C18-A340C6173313"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cret@cert.org"
}