CVE-2022-28646

CVE-2022-28646 is a critical vulnerability affecting Bentley MicroStation CONNECT and Bentley View, allowing remote code execution through specially crafted IFC files. Exploitation requires user interaction, as the target must open a malicious file, leading to a write past the end of an allocated buffer. With a CVSS score of 7.8 (High), this vulnerability carries significant risk, enabling attackers to execute code in the context of the current process. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.