High ICSA-21-035-01 5 CVEs

Luxion KeyShot (Update A)

Published Feb 4, 2021 · Updated Mar 9, 2021 · Revision 2

Vendor: Luxion Product: KeyShot Product: KeyShot Network Rendering Product: KeyShot Viewer Product: KeyVR

Summary

Successful exploitation of these vulnerabilities could allow arbitrary code execution, the storing of arbitrary scripts into automatic startup folders, and the attacking of products without sufficient UI warning.

Vulnerabilities 5

Unscored —

CVE-2021-22643

Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering v…

Feb 23, 2021
Unscored —

CVE-2021-22645

Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering v…

Feb 23, 2021
Unscored —

CVE-2021-22647

Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering v…

Feb 23, 2021
Unscored —

CVE-2021-22649

Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering v…

Feb 23, 2021
Unscored —

CVE-2021-22651

When loading a specially crafted file, Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 1…

Feb 23, 2021

Revision history

2021-03-09 #2
ICSA-21-035-01 Luxion KeyShot (Update A)
2021-02-04 #1
ICSA-21-035-01 Luxion KeyShot

References

ICS Advisory ICSA-21-035-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-21-035-01
Recommended Practices
https://us-cert.cisa.gov/ncas/tips/ST04-014
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-21-035-01
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B