Out-of-Bounds Read Vulnerability in Bentley MicroStation and Bentley View
CVE-2022-35905

3.3LOW

Key Information:

Vendor
Bentley
Status
Microstation
View
Vendor
CVE Published:
15 July 2022

Summary

An issue exists in Bentley MicroStation and Bentley View that allows an out-of-bounds read when processing manipulated FBX files. Attackers exploiting this issue could gain unauthorized access to sensitive information within the context of the current process by opening specially crafted FBX files in affected versions of these applications. Users of MicroStation and Bentley View should ensure their software is updated to prevent potential exploitation.

References

https://www.bentley.com/en/common-vulnerability-exposure/...
x_refsource_MISC

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.