CVE-2022-41613: Bentley Microstation Connect

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Bentley Systems MicroStation Connect versions 10.17.0.209 and prior are vulnerable to an Out-of-Bounds Read when when parsing DGN files, which may allow an attacker to crash the product, disclose sensitive information, or execute arbitrary code.

Affected products

  • Bentley Microstation Connect: up to and including 10.17.0.209

Published 2023-01-06. Last modified 2026-06-17.