CVE-2021-22645: Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are vulnerable ...

Summary

Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are vulnerable to an attack because the .bip documents display a “load” command, which can be pointed to a .dll from a...

What to do

Update luxion keyshot to version 10.1 or later.
Update luxion keyshot_network_rendering to version 10.1 or later.
Update luxion keyshot_viewer to version 10.1 or later.
Update luxion keyvr to version 10.1 or later.

Affected software

Vendor	Product	Affected versions
luxion	keyshot	< 10.1 `cpe:2.3:a:luxion:keyshot::::::::`
luxion	keyshot_network_rendering	< 10.1 `cpe:2.3:a:luxion:keyshot_network_rendering::::::::`
luxion	keyshot_viewer	< 10.1 `cpe:2.3:a:luxion:keyshot_viewer::::::::`
luxion	keyvr	< 10.1 `cpe:2.3:a:luxion:keyvr::::::::`
siemens	solid_edge_se2020_firmware	All versions `cpe:2.3:o:siemens:solid_edge_se2020_firmware::::::::`
siemens	solid_edge_se2021_firmware	All versions `cpe:2.3:o:siemens:solid_edge_se2021_firmware::::::::`

Original advisory text

Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are vulnerable ...

Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are vulnerable to an attack because the .bip documents display a “load” command, which can be pointed to a .dll from a remote network share. As a result, the .dll entry point can be executed without sufficient UI warning.

References

https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdf Third Party Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01 Third Party Advisory US Government Resource
https://www.zerodayinitiative.com/advisories/ZDI-21-323/ Third Party Advisory VDB Entry