Luxion KeyShot (Update A)

🗓️ 04 Feb 2021 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 57 Views

Luxion KeyShot (Update A) advisory for vulnerabilities including out-of-bounds write, out-of-bounds read, insufficient UI warnings, untrusted pointer dereference, and path traversal. Versions prior to 10.1 affected, allowing arbitrary code execution and dangerous scripts in startup folders

Reporter	Title	Published	Views	Family All 65
BDU FSTEC	The vulnerabilities of the 3D model rendering software programs Luxion KeyShot, Luxion KeyShot Viewer, Luxion KeyShot Network Rendering, and Luxion KeyVR allow attackers to execute arbitrary code.	2 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the 3D model rendering software programs Luxion KeyShot, Luxion KeyShot Viewer, Luxion KeyShot Network Rendering, and Luxion KeyVR allow attackers to execute arbitrary code.	2 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the 3D model rendering software programs Luxion KeyShot, Luxion KeyShot Viewer, Luxion KeyShot Network Rendering, and Luxion KeyVR allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.	2 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the 3D model rendering software programs Luxion KeyShot, Luxion KeyShot Viewer, Luxion KeyShot Network Rendering, and Luxion KeyVR allow attackers to execute arbitrary code.	2 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the 3D model rendering software programs Luxion KeyShot, Luxion KeyShot Viewer, Luxion KeyShot Network Rendering, and Luxion KeyVR allow attackers to compromise the confidentiality, integrity, and accessibility of protected information, due to incorrect path restrictions for accessing the restricted catalog.	2 Mar 202100:00	–	bdu_fstec
Circl	CVE-2021-22643	23 Feb 202107:34	–	circl
Circl	CVE-2021-22645	23 Feb 202107:34	–	circl
Circl	CVE-2021-22647	23 Feb 202107:34	–	circl
Circl	CVE-2021-22649	23 Feb 202107:34	–	circl
Circl	CVE-2021-22651	23 Feb 202120:35	–	circl

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2021/icsa-21-035-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-21-035-01
us-cert	www.us-cert.cisa.gov/ncas/tips/ST04-014
cisa	www.cisa.gov/news-events/ics-advisories/icsa-21-035-01
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
us-cert	www.us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B

04 Feb 2021 00:00Current

8.4High risk

Vulners AI Score8.4

CVSS 26.8

CVSS 3.17.8

EPSS0.02646