CVE-2013-6040

Name: CVE-2013-6040
Creator: NVD / NIST
Published: 2014-01-21T01:55:03.56+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

HIGHCVSS 8.1/10EPSS 7.37%

Last modified Jun 16, 2026

CVE-2013-6040 is a high-severity vulnerability rated 8.1/10 on the CVSS scale. MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls before version 4.0 vulnerable to arbitrary code via a crafted HTML document. Latest versions (4.0) of MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls have resolved the issue. EPSS estimates a 7.37% chance of exploitation in the next 30 days.

Description

MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls before version 4.0 vulnerable to arbitrary code via a crafted HTML document. Latest versions (4.0) of MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls have resolved the issue

Metrics

CVSS 3.1

8.1/10

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Probability

7.37%

93.6th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions
Mw6tech	Aztec Activex Control	All versions
Mw6tech	Datamatrix Activex Control	All versions
Mw6tech	Maxicode Activex Control	All versions

References

http://www.exploit-db.com/exploits/31176Exploit
http://www.exploit-db.com/exploits/31177Exploit
http://www.kb.cert.org/vuls/id/219470US Government Resource
https://www.mw6tech.com
http://www.exploit-db.com/exploits/31176Exploit
http://www.exploit-db.com/exploits/31177Exploit
http://www.kb.cert.org/vuls/id/219470US Government Resource

Timeline

Published: Jan 21, 2014
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2013-6040?

How severe is CVE-2013-6040?

CVE-2013-6040 has a CVSS score of 8.1/10 (HIGH severity). The EPSS model estimates a 7.37% probability of exploitation in the next 30 days.

How do I fix CVE-2013-6040?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2013-6040?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST