CVE-2021-22643 - Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are vulnerable to an out-of-bounds read while processing project files, which may allow an attacker to execute arbitrary code

Back Back to CVE browser

HIGH

Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are vulnerable to an out-of-bounds read while processing project files, which may allow an attacker to execute arbitrary code

Published Feb 23, 2021

7.8

HIGH

CVSS 3.1

EPSS 2.15%

Description

Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are vulnerable to an out-of-bounds read while processing project files, which may allow an attacker to execute arbitrary code.

Affected products

Vendor n/a Product Luxion KeyShot Default
n/a
- Version
  versions prior to 10.1
  Status
  affected
  Constraints
  -
Vendor n/a Product Luxion KeyShot Network Rendering Default
n/a
- Version
  versions prior to 10.1
  Status
  affected
  Constraints
  -
Vendor n/a Product Luxion KeyShot Viewer Default
n/a
- Version
  versions prior to 10.1
  Status
  affected
  Constraints
  -
Vendor n/a Product Luxion KeyVR Default
n/a
- Version
  versions prior to 10.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Luxion KeyShot

n/a

Version	Status	Constraints
versions prior to 10.1	affected	-

n/a

Luxion KeyShot Network Rendering

n/a

Version	Status	Constraints
versions prior to 10.1	affected	-

n/a

Luxion KeyShot Viewer

n/a

Version	Status	Constraints
versions prior to 10.1	affected	-

n/a

Luxion KeyVR

n/a

Version	Status	Constraints
versions prior to 10.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (4)

https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdf
x_refsource_CONFIRMThird Party Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01
x_refsource_MISCThird Party AdvisoryUS Government Resource
https://www.zerodayinitiative.com/advisories/ZDI-21-316/
x_refsource_MISCThird Party AdvisoryVDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-21-319/
x_refsource_MISCThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdf		x_refsource_CONFIRMThird Party Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01		x_refsource_MISCThird Party AdvisoryUS Government Resource
https://www.zerodayinitiative.com/advisories/ZDI-21-316/		x_refsource_MISCThird Party AdvisoryVDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-21-319/		x_refsource_MISCThird Party AdvisoryVDB Entry

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner icscert

Published Feb 23, 2021

Updated Aug 3, 2024

Reserved Jan 5, 2021

Link CVE-2021-22643

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2021-22643

Red Hat

Severity n/a

Public date n/a

Links CVE-2021-22643