Remote Code Execution Vulnerability in Bentley MicroStation CONNECT

CVE-2022-28318

Summary

A security flaw in Bentley MicroStation CONNECT allows remote attackers to execute arbitrary code by manipulating IFC files. The vulnerability is triggered when users visit a malicious page or open a compromised IFC file, leading to a buffer overflow that can execute code within the current process's context. To mitigate risks, users should ensure they are using the latest software version and maintain awareness of suspicious files.

References