CVE-2021-22647
Summary
| CVE | CVE-2021-22647 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-02-23 04:15:00 UTC |
| Updated | 2021-03-23 17:41:00 UTC |
| Description | Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are vulnerable to multiple out-of-bounds write issues while processing project files, which may allow an attacker to execute arbitrary code. |
Risk And Classification
Problem Types: CWE-787
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Luxion | Keyshot | All | All | All | All |
| Application | Luxion | Keyshot | All | All | All | All |
| Application | Luxion | Keyshot Network Rendering | All | All | All | All |
| Application | Luxion | Keyshot Network Rendering | All | All | All | All |
| Application | Luxion | Keyshot Viewer | All | All | All | All |
| Application | Luxion | Keyshot Viewer | All | All | All | All |
| Application | Luxion | Keyvr | All | All | All | All |
| Application | Luxion | Keyvr | All | All | All | All |
| Hardware | Siemens | Solid Edge Se2020 | - | All | All | All |
| Operating System | Siemens | Solid Edge Se2020 Firmware | All | All | All | All |
| Hardware | Siemens | Solid Edge Se2021 | - | All | All | All |
| Operating System | Siemens | Solid Edge Se2021 Firmware | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| ZDI-21-318 | Zero Day Initiative | MISC | www.zerodayinitiative.com | |
| Luxion KeyShot | CISA | MISC | us-cert.cisa.gov | Third Party Advisory, US Government Resource |
| ZDI-21-320 | Zero Day Initiative | MISC | www.zerodayinitiative.com | |
| ZDI-21-321 | Zero Day Initiative | MISC | www.zerodayinitiative.com | |
| ZDI-21-326 | Zero Day Initiative | MISC | www.zerodayinitiative.com | |
| ZDI-21-322 | Zero Day Initiative | MISC | www.zerodayinitiative.com | |
| cert-portal.siemens.com/productcert/pdf/ssa-231216.pdf | CONFIRM | cert-portal.siemens.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.