Riskcovery

CVE-2021-22651

State
Published
Severity
Not scored
Published
Feb 23, 2021
Updated
Aug 3, 2024
Reserved
Jan 5, 2021

Read the record on cve.org

Description

When loading a specially crafted file, Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are, while processing the extraction of temporary files, suffering from a directory traversal vulnerability, which allows an attacker to store arbitrary scripts into automatic startup folders.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-22 IMPROPER LIMITATION OF A PATHNAME TO A RESTRICTED DIRECTORY ('PATH TRAVERSAL') CWE-22

Affected Products

ProductVersions
Luxion KeyShot versionsn/a
  • versions prior to 10.1Affected
Luxion KeyShot Viewern/a
  • versions prior to 10.1Affected
Luxion KeyShot Network Renderingn/a
  • versions prior to 10.1Affected
Luxion KeyVRn/a
  • versions prior to 10.1Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.