CVE-2022-42901: High severity Bentley MicroStation vulnerability
Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds and stack overflow issues when opening crafted XMT files. Exploiting these issues could lead to information disclosure and code execution. The fixed versions are 10.17.01.58 for MicroStation and 10.17.01.19 for Bentley View.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Bentley MicroStation / MicroStation-based applicationsto a version that resolves this vulnerability.Fixed in 10.17.01.58* - Upgrade
Upgrade
Bentley Viewto a version that resolves this vulnerability.Fixed in 10.17.01.19*
Event History
Frequently Asked Questions
What is CVE-2022-42901?
CVE-2022-42901 is a vulnerability that affects Bentley MicroStation and MicroStation-based applications.
How does CVE-2022-42901 impact the affected software?
CVE-2022-42901 could lead to information disclosure and code execution when opening crafted XMT files in Bentley MicroStation and MicroStation-based applications.
What is the severity of CVE-2022-42901?
CVE-2022-42901 has a severity rating of high with a CVSS score of 7.8.
Which versions of MicroStation are affected by CVE-2022-42901?
MicroStation versions up to 10.17.01.58 are affected by CVE-2022-42901.
Which version of Bentley View is affected by CVE-2022-42901?
Bentley View version up to 10.17.01.19 is affected by CVE-2022-42901.