CVE-2021-27490

HIGH

7.8

CVSS Score

Published: May 27, 2021 at 04:08 PM UTC

Updated: June 17, 2026 at 03:44 AM UTC

6 products affected across 3 vendorsKeyShotSolid Edge SE2021 FirmwareSolid Edge SE2020 Firmware

Using Datakit Software libraries embedded in Luxion KeyShot software by N/A?

Get instant alerts when new vulnerabilities affect Datakit Software libraries embedded in Luxion KeyShot software - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 2%

Description

Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions v10.1 and prior are vulnerable to an out-of-bounds read, which may allow an attacker to execute arbitrary code.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Crosscadware · Datakit

95%

v ≤ 10.1v ≤ 2021.1

KeyShot · Luxion

95%

v ≤ 10.1

Solid Edge SE2020 Firmware · Siemens

95%

All versions

siemens-solid-edge-se2020 (same device)

Solid Edge SE2021 Firmware · Siemens

95%

All versions

siemens-solid-edge-se2021 (same device)

Solid Edge SE2020 · Siemensdevice

80%

All versions

Solid Edge SE2021 · Siemensdevice

80%

All versions

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (3)

x_refsource_CONFIRMThird Party Advisory

Source: [email protected]

https://cert-portal.siemens.com/productcert/pdf/ssa-119468.pdf

x_refsource_MISCThird Party AdvisoryUS Government Resource

Source: [email protected]

https://us-cert.cisa.gov/ics/advisories/icsa-21-145-01

x_refsource_MISCThird Party AdvisoryVDB Entry

Source: [email protected]

https://www.zerodayinitiative.com/advisories/ZDI-21-566/

CVSS

7.8HIGH[email protected]

Attack Vector: LOCAL
Complexity: LOW
Privileges: NONE
User Interaction: REQUIRED
Scope: UNCHANGED
Confidentiality: HIGH
Integrity: HIGH
Availability: HIGH

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-125

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card