CVE-2022-42900: 
Bentley MicroStation CONNECT vulnerability analysis and mitigation

Bentley MicroStation and MicroStation-based applications were found to contain out-of-bounds read issues when opening crafted FBX files. This vulnerability, identified as CVE-2022-42900, was disclosed on October 13, 2022. The affected products include MicroStation and Bentley View applications (NIST NVD).

The vulnerability is characterized by out-of-bounds read issues that occur when processing specially crafted FBX files. The severity of this vulnerability is rated as high with a CVSS score of 7.8. The fixed versions addressing this vulnerability are 10.17.01.58* for MicroStation and 10.17.01.19* for Bentley View (CISA Bulletin).

Successful exploitation of this vulnerability could lead to information disclosure and potential code execution on affected systems. The vulnerability requires user interaction, specifically opening a maliciously crafted FBX file (NIST NVD).

The vulnerability requires user interaction to be exploited, specifically through the opening of specially crafted FBX files. An attacker would need to convince a user to open a malicious file to trigger the vulnerability (NIST NVD).

Users are advised to upgrade to the fixed versions: MicroStation version 10.17.01.58* or Bentley View version 10.17.01.19* to address this vulnerability (CISA Bulletin).