Riskcovery

CVE-2021-22645

State
Published
Severity
Not scored
Published
Feb 23, 2021
Updated
Aug 3, 2024
Reserved
Jan 5, 2021

Read the record on cve.org

Description

Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are vulnerable to an attack because the .bip documents display a “load” command, which can be pointed to a .dll from a remote network share. As a result, the .dll entry point can be executed without sufficient UI warning.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-357 INSUFFICIENT UI WARNING OF DANGEROUS OPERATIONS CWE-357

Affected Products

ProductVersions
Luxion KeyShotn/a
  • versions prior to 10.1Affected
Luxion KeyShot Viewern/a
  • versions prior to 10.1Affected
Luxion KeyShot Network Renderingn/a
  • versions prior to 10.1Affected
Luxion KeyVRn/a
  • versions prior to 10.1Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.