CVE-2021-34939

CVE-2021-34939 is a critical vulnerability affecting Bentley View 10.15.0.75 and Bentley MicroStation, allowing remote code execution. The flaw stems from improper validation during JT file parsing, where the software fails to check for an object's existence before operating on it. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page, leading to high impact on confidentiality, integrity, and availability. Despite its high CVSS score of 7.8, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.