CVE-2022-28308 is a sensitive information disclosure vulnerability affecting Bentley View 10.16.02.022 and Bentley MicroStation. It stems from improper parsing of 3DS files, where crafted data can lead to a read past the end of a buffer. Exploitation requires user interaction, typically opening a malicious file, and has a CVSS score of 5.5 (Medium). While it can disclose sensitive information, it could also be chained with other vulnerabilities for arbitrary code execution. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 10.16.03CPE matchmatch criteria | cpe:2.3:a:bentley:microstation:*:*:*:*:*:*:*:* | ||
< 10.16.03CPE matchmatch criteria | cpe:2.3:a:bentley:view:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.