CVE-2022-42899: High severity Bentley MicroStation vulnerability
Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds read and stack overflow issues when opening crafted SKP files. Exploiting these issues could lead to information disclosure and code execution. The fixed versions are 10.17.01.58 for MicroStation and 10.17.01.19 for Bentley View.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Bentley MicroStation and MicroStation-based applicationsto a version that resolves this vulnerability.Fixed in 10.17.01.58* - Upgrade
Upgrade
Bentley Viewto a version that resolves this vulnerability.Fixed in 10.17.01.19*
Event History
Frequently Asked Questions
What is CVE-2022-42899?
CVE-2022-42899 is a vulnerability that affects Bentley MicroStation and MicroStation-based applications, allowing for out-of-bounds read and stack overflow issues when opening crafted SKP files.
What is the severity of CVE-2022-42899?
The severity of CVE-2022-42899 is high, with a CVSS score of 7.8.
How can CVE-2022-42899 be exploited?
CVE-2022-42899 can be exploited by opening specially crafted SKP files, which can lead to information disclosure and code execution.
Which software versions are affected by CVE-2022-42899?
Bentley MicroStation versions up to and excluding 10.17.01.58, as well as Bentley View versions up to and excluding 10.17.01.19, are affected by CVE-2022-42899.
How can I fix CVE-2022-42899?
To fix CVE-2022-42899, update Bentley MicroStation to version 10.17.01.58* and Bentley View to version 10.17.01.19*.