CVE-2022-41613

State: Published
Severity: 7.8 High
Published: Jan 6, 2023
Updated: Feb 13, 2025
Reserved: Sep 29, 2022

Description

Bentley Systems MicroStation Connect versions

10.17.0.209 and prior are vulnerable to an Out-of-Bounds Read when when parsing DGN files, which may allow an attacker to crash the product, disclose sensitive information, or execute arbitrary code.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	icscert

Weaknesses

CWE-125 Out-of-bounds Read

Affected Products

Product	Versions
MicroStation ConnectBentley Systems	10.17.0.209 and earlierAffected

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-293-01government-resource
https://www.bentley.com/advisories/be-2023-0003/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.