CVE-2022-40201CWE-121

Bentley Systems MicroStation Connect versions 10.17.0.209 and prior are vulnerable to a Stack-Based Buffer Overflow when a malformed design (DGN) file is…

High · published January 6, 2023

CVSS v3.1
7.8
EPSS
0%
Percentile
27.6
In the wild
Unconfirmed
What it is

Bentley Systems MicroStation Connect versions

10.17.0.209 and prior are vulnerable to a Stack-Based Buffer Overflow when a malformed design (DGN) file is parsed. This may allow an attacker to execute arbitrary code.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00352 · 27.6th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2023-01-06T21:10Z
EPSS history
Timeline
  • 06 JAN 21:10Z
    Bentley Systems MicroStation Connect versions 10.17.0.209 and prior are vulnerable to a Stack-Based Buffer Overflow when a malformed design (DGN) file is…
    cvelistv5