CVE-2022-28313

CVE-2022-28313 is a sensitive information disclosure vulnerability affecting Bentley MicroStation CONNECT and Bentley View, stemming from a read past the end of an allocated buffer when parsing malicious 3DS files. Exploitation requires user interaction, as the target must open a specially crafted file. With a CVSS score of 5.5 (Medium), this local attack vector has low attack complexity and can lead to high confidentiality impact, potentially enabling arbitrary code execution when chained with other vulnerabilities. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.