CVE-2021-22647

Published: Feb 23, 2021Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are vulnerable to multiple out-of-bounds write issues while processing project files, which may allow an attacker to execute arbitrary code.

Affected (6)

Products: Luxion: Keyshot, Keyshot Network Rendering, Keyshot Viewer, Keyvr · Siemens: Solid Edge Se2020 Firmware, Solid Edge Se2021 Firmware

4 products

Keyshot Network Rendering

2 products

Solid Edge Se2020 Firmware

Solid Edge Se2021 Firmware

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Luxion Keyshot	Before 10.1
Luxion Keyshot Network Rendering	Before 10.1
Luxion Keyshot Viewer	Before 10.1
Luxion Keyvr	Before 10.1

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Solid Edge Se2020 Firmware	All versions

Running on/with	Platform Versions
Siemens Solid Edge Se2020	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Solid Edge Se2021 Firmware	All versions

Running on/with	Platform Versions
Siemens Solid Edge Se2021	All versions

Related CWEs

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (14)

https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdf

Source: ics-cert@hq.dhs.gov

Third Party Advisory

https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://www.zerodayinitiative.com/advisories/ZDI-21-318/

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryVDB Entry

https://www.zerodayinitiative.com/advisories/ZDI-21-320/

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryVDB Entry

https://www.zerodayinitiative.com/advisories/ZDI-21-321/

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryVDB Entry

https://www.zerodayinitiative.com/advisories/ZDI-21-322/

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryVDB Entry

https://www.zerodayinitiative.com/advisories/ZDI-21-326/

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryVDB Entry

https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

https://www.zerodayinitiative.com/advisories/ZDI-21-318/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://www.zerodayinitiative.com/advisories/ZDI-21-320/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://www.zerodayinitiative.com/advisories/ZDI-21-321/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://www.zerodayinitiative.com/advisories/ZDI-21-322/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://www.zerodayinitiative.com/advisories/ZDI-21-326/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.