CVE-2022-28646

Vulnerability summary (CVE-2022-28646) : Bentley MicroStation CONNECT 10.16.2.034 is affected by an out-of-bounds write in the IFC file parser. Crafted IFC data can trigger a buffer overrun, enabling remote code execution in the context of the current process. Exploitation requires user interacti...

CVE-2022-28311

Bentley MicroStation CONNECT 10.16.02.034 is affected by CVE-2022-28311 due to an out-of-bounds read in DXF file parsing, allowing remote code execution after user interaction (visiting a malicious page or opening a malicious file). The issue originates from crafted DXF data triggering a read pas...

CVE-2022-28318

CVE-2022-28318 affects Bentley MicroStation CONNECT 10.16.02.34. The issue is a buffer-overflow in the IFC file parsing path that can be triggered by crafted IFC data, leading to remote code execution in the current process after user interaction (target must visit a malicious page or open a mali...

CVE-2022-28306

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2022-28312

The CVE-2022-28312 issue affects Bentley MicroStation CONNECT 10.16.02.034, with a flaw in 3DS file parsing that can trigger a read past the end of an allocated buffer. This leads to information disclosure and, in conjunction with other vulnerabilities, may allow arbitrary code execution in the a...

CVE-2022-28305

Bentley MicroStation CONNECT 10.16.02.034 is affected by CVE-2022-28305 due to a stack-based buffer overflow in OBJ file parsing. The flaw arises from insufficient validation of user-supplied data length before copying to a fixed-length buffer, enabling arbitrary code execution when a user opens ...

CVE-2022-28316

Bentley MicroStation CONNECT 10.16.02.34 is affected by an out-of-bounds write in the IFC file parsing logic. Crafted data in an IFC file can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. User interaction is required (ta...

CVE-2022-28641

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2022-28320

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.16.02.022. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-28316

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2022-28308

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.16.02.022. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2022-28307

Bentley View 10.16.02.022 is affected by a DXF file parsing vulnerability that can trigger a read past the end of an allocated buffer, enabling remote code execution. The issue resides in the DXF parsing path and requires user interaction (the target must visit a malicious page or open a maliciou...

CVE-2022-28304

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2022-28309

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.16.02.022. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2022-28300

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation 10.16.02.034 CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2022-28314

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2022-28317

CVE-2022-28317 affects Bentley MicroStation CONNECT 10.16.02.34. The root cause is an uninitialized memory access during IFC file parsing, enabling remote code execution when a user opens a malicious file or visits a crafted page. Impact is described as arbitrary code execution in the context of ...

CVE-2022-28307

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.16.02.022. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-28312

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fla...

CVE-2022-28647

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.2.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...