Vulnerability Description
Bentley Systems MicroStation Connect versions 10.17.0.209 and prior are vulnerable to an Out-of-Bounds Read when when parsing DGN files, which may allow an attacker to crash the product, disclose sensitive information, or execute arbitrary code.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bentley | Microstation Connect | <= 10.17.0.209 |
Related Weaknesses (CWE)
References
- https://www.bentley.com/advisories/be-2023-0003/
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-293-01Third Party AdvisoryUS Government Resource
- https://www.bentley.com/advisories/be-2023-0003/
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-293-01Third Party AdvisoryUS Government Resource
FAQ
What is CVE-2022-41613?
CVE-2022-41613 is a vulnerability with a CVSS score of 7.8 (HIGH). Bentley Systems MicroStation Connect versions 10.17.0.209 and prior are vulnerable to an Out-of-Bounds Read when when parsing DGN files, which may allow an attacker to crash the product, disclose se...
How severe is CVE-2022-41613?
CVE-2022-41613 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-41613?
Check the references section above for vendor advisories and patch information. Affected products include: Bentley Microstation Connect.