Mathcad 12 through 13.1 allows local users to bypass the security features by directly accessing or editing the XML representation of the…

Description

Mathcad 12 through 13.1 allows local users to bypass the security features by directly accessing or editing the XML representation of the worksheet with a text editor or other program, which allows attackers to (1) bypass password protection by replacing the password field with a hash of a known password, (2) modify timestamps to avoid detection of modifications, (3) remove locks by removing the "is-locked" attribute, and (4) view locked data, which is stored in plaintext.

Scores

EPSS (exploitation in 30 days)

0.33% · top 74% of all CVEs (6 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.4.

Weakness

• n/a

Affected products

• n/a

  • affected n/a

References (6)

• mathcad-locked-area-security-bypass(27118) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
• 2305 (opens in a new tab)third-party-advisoryx_refsource_SREASONx_transferred
• mathcad-timestamp-security-bypass(27116) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
• mathcad-area-password-security-bypass(27115) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
• 20060608 Mathcad Area Lock Vulnerability (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
• mathcad-islocked-security-bypass(27117) (opens in a new tab)vdb-entryx_refsource_XFx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2006-7037](https://trackcve.app/badge/CVE-2006-7037.svg)](https://trackcve.app/cve/CVE-2006-7037)

Record last updated 7 Aug 2024, 20:50 UTC.