CyberSecBulletin

Bentley Systems vulnerabilities

We track 2 vulnerabilities in Bentley Systems products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 6, 2023.

2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score

Latest Bentley Systems vulnerabilities

  • 7.8 High severity

    MicroStation Connect: Out-of-bounds Read

    CVE-2022-41613Bentley Systems

    Bentley Systems MicroStation Connect versions 10.17.0.209 and prior are vulnerable to an Out-of-Bounds Read when when parsing DGN files, which may allow an attacker to crash the product, disclose sensitive information, or execute arbitrary code.

  • 7.8 High severity

    MicroStation Connect: Stack-based Buffer Overflow

    CVE-2022-40201Bentley Systems

    Bentley Systems MicroStation Connect versions 10.17.0.209 and prior are vulnerable to a Stack-Based Buffer Overflow when a malformed design (DGN) file is parsed. This may allow an attacker to execute arbitrary code.