CVE-2021-22645

Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are vulnerable to an attack because the .bip documents display a “load” command, which can be pointed to a .dll from a remote network share. As a result, the .dll entry point can be executed without sufficient UI warning.

• CWE-357

• https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdfThird Party Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01Third Party Advisory, US Government Resource
• https://www.zerodayinitiative.com/advisories/ZDI-21-323/Third Party Advisory, VDB Entry
• https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdfThird Party Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01Third Party Advisory, US Government Resource
• https://www.zerodayinitiative.com/advisories/ZDI-21-323/Third Party Advisory, VDB Entry

Published

Feb 23, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-2264Vulnerability in the Oracle VM VirtualBox product of Oracle …8.4
• CVE-2021-22640An attacker can decrypt the Ovarro TBox login password by co…9.8
• CVE-2021-22641A heap-based buffer overflow issue has been identified in th…7.8
• CVE-2021-22642An attacker could use specially crafted invalid Modbus frame…7.5
• CVE-2021-22643Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer…7.8
• CVE-2021-22644Ovarro TBox TWinSoft uses the custom hardcoded user “TWinSof…9.8
• CVE-2021-22646The “ipk” package containing the configuration created by TW…9.8
• CVE-2021-22647Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer…7.8
• CVE-2021-22648Ovarro TBox proprietary Modbus file access functions allow a…9.8
• CVE-2021-22649Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer…7.8
• CVE-2021-22650An attacker may use TWinSoft and a malicious source project …9.8
• CVE-2021-22651When loading a specially crafted file, Luxion KeyShot versio…7.8