GCVE - cpe:2.3:a:n/a:luxion_keyshot_viewer:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:luxion_keyshot_viewer:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	N/A (`22f567d3-1203-528c-8f0e-3eb9c2f6ca78`)
Product	Luxion Keyshot Viewer (`73d3c638-5b2d-5985-9408-5ee2e9fdefe4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-22651`	vulnerable	2026-06-08 05:30:00.989328	Details available When loading a specially crafted file, Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are, while processing the extraction of temporary files, suffering from a directory traversal vulnerability, which allows an attacker to store arbitrary scripts into automatic startup folders. Published: 2021-02-23T17:45:36.000Z Updated: 2024-08-03T18:51:07.076Z Open on db.gcve.eu Reference links https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01 https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdf https://www.zerodayinitiative.com/advisories/ZDI-21-324/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-22649`	vulnerable	2026-06-08 05:30:00.976794	Details available Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 have multiple NULL pointer dereference issues while processing project files, which may allow an attacker to execute arbitrary code. Published: 2021-02-23T03:02:05.000Z Updated: 2024-08-03T18:51:05.823Z Open on db.gcve.eu Reference links https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01 https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdf https://www.zerodayinitiative.com/advisories/ZDI-21-317/ https://www.zerodayinitiative.com/advisories/ZDI-21-325/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-22647`	vulnerable	2026-06-08 05:30:00.974851	Details available Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are vulnerable to multiple out-of-bounds write issues while processing project files, which may allow an attacker to execute arbitrary code. Published: 2021-02-23T03:13:39.000Z Updated: 2024-08-03T18:44:14.057Z Open on db.gcve.eu Reference links https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01 https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdf https://www.zerodayinitiative.com/advisories/ZDI-21-322/ https://www.zerodayinitiative.com/advisories/ZDI-21-321/ https://www.zerodayinitiative.com/advisories/ZDI-21-320/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-22645`	vulnerable	2026-06-08 05:30:00.972616	Details available Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are vulnerable to an attack because the .bip documents display a “load” command, which can be pointed to a .dll from a remote network share. As a result, the .dll entry point can be executed without sufficient UI warning. Published: 2021-02-23T03:02:08.000Z Updated: 2024-08-03T18:44:13.754Z Open on db.gcve.eu Reference links https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01 https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdf https://www.zerodayinitiative.com/advisories/ZDI-21-323/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-22643`	vulnerable	2026-06-08 05:30:00.954832	Details available Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are vulnerable to an out-of-bounds read while processing project files, which may allow an attacker to execute arbitrary code. Published: 2021-02-23T03:13:36.000Z Updated: 2024-08-03T18:44:14.139Z Open on db.gcve.eu Reference links https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01 https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdf https://www.zerodayinitiative.com/advisories/ZDI-21-319/ https://www.zerodayinitiative.com/advisories/ZDI-21-316/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.