CVE-2021-46615

🗓️ 18 Feb 2022 19:45:40Reported by zdiType

Vulnerability in Bentley MicroStation CONNECT 10.16.0.80 allows remote attackers to disclose sensitive information via malicious files or web pages, due to lack of validation in BMP image parsing

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2021-46615	18 Feb 202220:15	–	attackerkb
Circl	CVE-2021-46615	18 Feb 202222:37	–	circl
CNNVD	Bentley Systems MicroStation 缓冲区错误漏洞	31 Jan 202200:00	–	cnnvd
CNVD	Bentley Systems MicroStation Buffer Overflow Vulnerability (CNVD-2022-15819)	10 Feb 202200:00	–	cnvd
Cvelist	CVE-2021-46615	18 Feb 202219:45	–	cvelist
EUVD	EUVD-2021-33291	3 Oct 202520:07	–	euvd
NVD	CVE-2021-46615	18 Feb 202220:15	–	nvd
OSV	CVE-2021-46615	18 Feb 202220:15	–	osv
Prion	Design/Logic Flaw	18 Feb 202220:15	–	prion
RedhatCVE	CVE-2021-46615	22 May 202518:54	–	redhatcve

NVD

Vulners

Node

bentley microstationRange<10.16.02

bentley microstation_connectRange≤10.16.0.80

bentley viewRange<10.16.02

[
  {
    "product": "MicroStation CONNECT",
    "vendor": "Bentley",
    "versions": [
      {
        "status": "affected",
        "version": "10.16.0.80"
      }
    ]
  }
]

Source	Link
bentley	www.bentley.com/en/common-vulnerability-exposure/BE-2021-0002
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-22-202/

21 Nov 2024 06:34Current

5.2Medium risk

Vulners AI Score5.2

CVSS 24.3

CVSS 3.15.5

CVSS 33.3

EPSS0.00547

CWE-125