SSA-119468: Luxion KeyShot Vulnerabilities in Solid Edge
The Solid Edge installation package includes a specific version of the third-party product KeyShot from Luxion, which may not contain the latest security fixes provided by Luxion. Siemens recommends to update KeyShot according to the information in the Luxion Security Advisory LSA-394129.
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-27490US | high7.8 | — | ||
Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions v10.1 and prior are vulnerable to an out-of-bounds read,… | ||||
| CVE-2021-27496US | high7.8 | — | ||
Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions v10.1 and prior lack proper validation of user-supplied… | ||||
| CVE-2021-27494US | high7.8 | — | ||
Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions v10.1 and prior lack proper validation of user-supplied… | ||||
| CVE-2021-27492US | medium5.5 | — | ||
When opening a specially crafted 3DXML file, the application containing Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in K… | ||||
| CVE-2021-27488US | high7.8 | — | ||
Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions v10.1 and prior lack proper validation of user-supplied… | ||||
references
External citations — patches, advisories, analysis.
remediations (20)
- MitigationSolid Edge SE2020
Avoid to open untrusted files from unknown sources
- MitigationSolid Edge SE2020
Avoid to open untrusted files from unknown sources
- MitigationSolid Edge SE2020
Avoid to open untrusted files from unknown sources
- MitigationSolid Edge SE2020
Avoid to open untrusted files from unknown sources
- MitigationSolid Edge SE2020
Avoid to open untrusted files from unknown sources
- MitigationSolid Edge SE2021
Avoid to open untrusted files from unknown sources
- MitigationSolid Edge SE2021
Avoid to open untrusted files from unknown sources
- MitigationSolid Edge SE2021
Avoid to open untrusted files from unknown sources
- MitigationSolid Edge SE2021
Avoid to open untrusted files from unknown sources
- MitigationSolid Edge SE2021
Avoid to open untrusted files from unknown sources
- FixedSolid Edge SE2020
Update KeyShot V8 (as bundled with SE2020) to V10.2 or later version
https://www.keyshot.com/resources/downloads/ - FixedSolid Edge SE2020
Update KeyShot V8 (as bundled with SE2020) to V10.2 or later version
https://www.keyshot.com/resources/downloads/ - FixedSolid Edge SE2020
Update KeyShot V8 (as bundled with SE2020) to V10.2 or later version
https://www.keyshot.com/resources/downloads/ - FixedSolid Edge SE2020
Update KeyShot V8 (as bundled with SE2020) to V10.2 or later version
https://www.keyshot.com/resources/downloads/ - FixedSolid Edge SE2020
Update KeyShot V8 (as bundled with SE2020) to V10.2 or later version
https://www.keyshot.com/resources/downloads/ - FixedSolid Edge SE2021
Update KeyShot V9 (as bundled with SE2021) to V10.2 or later version
https://www.keyshot.com/resources/downloads/ - FixedSolid Edge SE2021
Update KeyShot V9 (as bundled with SE2021) to V10.2 or later version
https://www.keyshot.com/resources/downloads/ - FixedSolid Edge SE2021
Update KeyShot V9 (as bundled with SE2021) to V10.2 or later version
https://www.keyshot.com/resources/downloads/ - FixedSolid Edge SE2021
Update KeyShot V9 (as bundled with SE2021) to V10.2 or later version
https://www.keyshot.com/resources/downloads/ - FixedSolid Edge SE2021
Update KeyShot V9 (as bundled with SE2021) to V10.2 or later version
https://www.keyshot.com/resources/downloads/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan