CVE-2021-27488

🗓️ 27 May 2021 15:37:25Reported by icscertType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 59 Views

KeyShot v10.1 and prior vulnerable to out-of-bounds write via CATPart file

Reporter	Title	Published	Views	Family All 9
CNNVD	Siemens Solid Edge 缓冲区错误漏洞	12 May 202100:00	–	cnnvd
CNVD	Siemens Solid Edge Out-of-Bounds Write Vulnerability (CNVD-2021-37269)	17 May 202100:00	–	cnvd
Cvelist	CVE-2021-27488	27 May 202115:37	–	cvelist
EUVD	EUVD-2021-14242	7 Oct 202500:30	–	euvd
ICS	Datakit Libraries bundled in Luxion KeyShot	25 May 202100:00	–	ics
NVD	CVE-2021-27488	27 May 202116:15	–	nvd
Prion	Default credentials	27 May 202116:15	–	prion
RedhatCVE	CVE-2021-27488	9 Jan 202611:29	–	redhatcve
Zero Day Initiative	(0Day) Siemens Solid Edge Viewer CATPart File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability	12 May 202100:00	–	zdi

NVD

Vulners

Node

datakit crosscadwareRange≤2021.1

luxion keyshotRange≤10.1

Node

siemens solid_edge_se2020_firmware

AND

siemens solid_edge_se2020Match-

Node

siemens solid_edge_se2021_firmware

AND

siemens solid_edge_se2021Match-

[
  {
    "product": "Datakit Software libraries embedded in Luxion KeyShot software",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions v10.1 and prior"
      }
    ]
  }
]

Source	Link
us-cert	www.us-cert.cisa.gov/ics/advisories/icsa-21-145-01
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-21-563/
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-119468.pdf

21 Nov 2024 05:58Current

7.7High risk

Vulners AI Score7.7

CVSS 26.8

CVSS 3.17.8

EPSS0.00404

CWE-787