High severity · published Feb 23, 2021
CVE-2021-22651
When loading a specially crafted file, Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to…
7.8
CVSS
2.9%
EPSS
No
On KEV
Description
When loading a specially crafted file, Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are, while processing the extraction of temporary files, suffering from a directory traversal vulnerability, which allows an attacker to store arbitrary scripts into automatic startup folders.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.9% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Keyshot · Luxion
before 10.1 · source: NVD
KN
Keyshot Network Rendering · Luxion
before 10.1 · source: NVD
KV
Keyshot Viewer · Luxion
before 10.1 · source: NVD
KE
Keyvr · Luxion
before 10.1 · source: NVD
SE
Solid Edge Se2020 Firmware · Siemens
All versions, or not specified · source: NVD
SE
Solid Edge Se2021 Firmware · Siemens
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-22651
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-22651
Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdf
Patch
https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01
Third Party Advisory
https://www.zerodayinitiative.com/advisories/ZDI-21-324/
More from Keyshot
7.8
CVE-2026-92202
Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability
7.8
CVE-2025-7222
Luxion KeyShot 3DM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
7.8
CVE-2025-1047
Luxion KeyShot PVS File Parsing Access of Uninitialized Pointer Remote Code Execution Vulnerability
7.8
CVE-2025-1046
Luxion KeyShot SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
7.8
CVE-2025-1045
Luxion KeyShot Viewer KSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability