Arbitrary Code Execution Vulnerability in Bentley MicroStation CONNECT by Bentley

CVE-2022-28319

Summary

This vulnerability exposes Bentley MicroStation CONNECT to a remote code execution risk, enabling attackers to execute arbitrary code when users interact with malicious 3DM files. The flaw arises due to insufficient initialization of memory during file parsing, which can be exploited if a user opens a compromised file or visits a malicious webpage. This highlights the importance of maintaining vigilance and ensuring software is updated to mitigate potential threats.

References