CVE-2021-22645
mediumpriority · track · 32EPSS 0.016 · 75 %ileEURUUSEPSS · scored 2026-10-27
Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are vulnerable to an attack because the .bip documents display a “load” command, which can be pointed to a .dll from a remote network share. As a result, the .dll entry point can be executed without sufficient UI warning.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedKeyShotcisa_csaf_ot
For more information on products dependent on the affected KeyShot products, see the following vendor security advisory:
https://new.siemens.com/global/en/products/services/cert.html#SecurityPublications - FixedKeyShot Network Renderingcisa_csaf_ot
For more information on products dependent on the affected KeyShot products, see the following vendor security advisory:
https://new.siemens.com/global/en/products/services/cert.html#SecurityPublications - FixedKeyShot Viewercisa_csaf_ot
For more information on products dependent on the affected KeyShot products, see the following vendor security advisory:
https://new.siemens.com/global/en/products/services/cert.html#SecurityPublications - FixedKeyVRcisa_csaf_ot
For more information on products dependent on the affected KeyShot products, see the following vendor security advisory:
https://new.siemens.com/global/en/products/services/cert.html#SecurityPublications
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.8–7.8
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (22)
Products and version ranges known to be affected.
- luxion keyshot network rendering< 10.1nvdUScpe:2.3:a:luxion:keyshot_network_rendering:*:*:*:*:*:*:*:*
advisories (1)
Vendor and ecosystem advisories describing this.
- ICSA-21-035-01Luxion KeyShot (Update A)2021-02-04icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow arbitrary code execution, the storing of arbitrary scripts into automatic startup folders, and the attacking of products without sufficient UI warning.
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (12)
External citations — patches, advisories, analysis.
- https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdfcnnvd
- https://luxion.com/index.htmlPatchcnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2021-22645cnnvd
- https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01cnnvd
- https://www.auscert.org.au/bulletins/ESB-2021.0418cnnvd
- https://www.zerodayinitiative.com/advisories/ZDI-21-323/cnnvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdfenisa_euvd
- https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01enisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan