CVE-2021-46599

🗓️ 18 Feb 2022 19:45:17Reported by zdiType

CVE-2021-46599 allows remote attackers to disclose sensitive information on Bentley MicroStation CONNECT 10.16.0.80. User interaction required to exploit by visiting a malicious page or opening a malicious file. Parsing PDF files exposes flaw due to lack of proper validation, leading to buffer overflow and potential arbitrary code execution. ZDI-CAN-15393

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2021-46599	18 Feb 202220:15	–	attackerkb
CNNVD	Bentley Systems MicroStation 缓冲区错误漏洞	31 Jan 202200:00	–	cnnvd
CNVD	Bentley Systems MicroStation Buffer Overflow Vulnerability (CNVD-2022-16148)	10 Feb 202200:00	–	cnvd
Cvelist	CVE-2021-46599	18 Feb 202219:45	–	cvelist
EUVD	EUVD-2021-33275	3 Oct 202520:07	–	euvd
NVD	CVE-2021-46599	18 Feb 202220:15	–	nvd
Prion	Design/Logic Flaw	18 Feb 202220:15	–	prion
RedhatCVE	CVE-2021-46599	22 May 202518:56	–	redhatcve
Zero Day Initiative	Bentley MicroStation CONNECT PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability	31 Jan 202200:00	–	zdi

NVD

Vulners

Node

bentley microstationRange<10.16.02

bentley microstation_connectRange≤10.16.0.80

bentley viewRange<10.16.02

[
  {
    "product": "MicroStation CONNECT",
    "vendor": "Bentley",
    "versions": [
      {
        "status": "affected",
        "version": "10.16.0.80"
      }
    ]
  }
]

Source	Link
bentley	www.bentley.com/en/common-vulnerability-exposure/BE-2021-0003
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-22-186/

21 Nov 2024 06:34Current

3.4Low risk

Vulners AI Score3.4

CVSS 3.13.3

CVSS 24.3

CVSS 33.3

EPSS0.00489

CWE-125