SSA-572164: Luxion KeyShot Vulnerability in Solid Edge
The Solid Edge installation package includes a specific version of the third-party product KeyShot from Luxion : https://www.keyshot.com, which may not contain the latest security fixes provided by Luxion. Siemens recommends to update KeyShot according to the information in the Luxion Security Advisory LSA-610622: https://download.keyshot.com/cert/lsa-610622/lsa-610622.pdf.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-27044US | high7.8 | — | ||
A Out-Of-Bounds Read/Write Vulnerability in Autodesk FBX Review version 1.4.0 may lead to remote code execution through maliciously crafted DLL files or information disclosure. | ||||
references
External citations — patches, advisories, analysis.
remediations (2)
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources
- FixedSolid Edge SE2023
Update KeyShot 11 (as bundled with SE2023) to KeyShot V2023.1 or later version
https://www.keyshot.com/resources/downloads/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan