CVE Vulnerability

CVE-2022-42899

Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds read and stack overflow issues when opening crafted SKP files. Exploiting these issues could lead to information disclosure and code execution. The fixed versions are 10.17.01.58* for MicroStation and 10.17.01.19* for Bentley View.

7.8 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.bentley.com/legal/common-vulnerability-exposure-be-2022-0017/ Vendor Advisory
Configurations

Configuration 1

cpe:2.3:a:bentley:microstation:*:*:*:*:*:*:*:*
cpe:2.3:a:bentley:view:*:*:*:*:*:*:*:*
Information

Published : 2022-10-13 03:15

Updated : 2022-10-13 08:16

NVD link : CVE-2022-42899

Mitre link : CVE-2022-42899

Products Affected
No products.
CWE
CWE-125

Out-of-bounds Read