Out-of-Bounds and Stack Overflow Vulnerabilities in Bentley MicroStation and Applications
CVE-2022-42901
7.8HIGH
Summary
Bentley MicroStation and associated applications are susceptible to out-of-bounds and stack overflow vulnerabilities when handling specially crafted XMT files. These security flaws could facilitate information disclosure and unauthorized code execution, posing significant threats to user data and system integrity. Users are advised to upgrade to version 10.17.01.58 or later for MicroStation and 10.17.01.19 or later for Bentley View to mitigate these risks.
References
CVSS V3.1
Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved