Bentley Luki w zabezpieczeniach

Oś czasu

Rodzaj

Produkt

Bentley View114
Bentley MicroStation CONNECT98
Bentley MicroStation11
Bentley ContextCapture2
Bentley Assetwise ALIM Web1

Przeciwdziałanie

Official Fix159
Temporary Fix0
Workaround0
Unavailable0
Not Defined63

Wykorzystywanie

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined222

Wektor dostępu

Not Defined0
Physical0
Local2
Adjacent3
Network217

Uwierzytelnianie

Not Defined0
High0
Low6
None216

Interakcja z użytkownikiem

Not Defined0
Required215
None7

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤452
≤58
≤67
≤728
≤866
≤961
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤452
≤58
≤610
≤725
≤882
≤945
≤100

VulDB

≤10
≤20
≤30
≤41
≤565
≤60
≤794
≤81
≤961
≤100

NVD

≤10
≤20
≤30
≤415
≤50
≤64
≤70
≤882
≤90
≤100

CNA

≤10
≤20
≤30
≤455
≤50
≤60
≤70
≤8156
≤90
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k1
<2k92
<5k129
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k184
<2k18
<5k20
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (11): ALIM For Transportation (1), Assetwise ALIM Web (1), Assetwise Information Integrity Server (1), ContextCapture (2), MicroStation (11), MicroStation CONNECT (98), View (114), Voew (1), eB System management Console (1), seatd (1), user-supplied (1)

OpublikowanoBaseTempSłaby punktProdWykPrzEPSSCTICVE
2024-02-263.53.4Bentley Assetwise ALIM Web Session Token information disclosureNieznanyNot DefinedOfficial Fix0.000430.00CVE-2024-27455
2024-01-086.36.3Bentley View SKP File Parser memory corruptionNieznanyNot DefinedNot Defined0.000460.02CVE-2023-44430
2023-12-224.34.1Bentley eB System management Console Configuration Options information disclosureNieznanyNot DefinedOfficial Fix0.000930.00CVE-2023-51708
2023-04-024.34.1Bentley View FBX File Parser information disclosureNieznanyNot DefinedOfficial Fix0.000000.04CVE-2022-43656
2023-04-024.34.1Bentley View SKP File Parser memory corruptionNieznanyNot DefinedOfficial Fix0.000000.00CVE-2022-43652
2023-04-026.36.0Bentley View FBX File Parser memory corruptionNieznanyNot DefinedOfficial Fix0.000000.04CVE-2022-43655
2023-04-026.36.0Bentley View SKP File Parser memory corruptionNieznanyNot DefinedOfficial Fix0.000000.00CVE-2022-43653
2023-04-026.36.0Bentley View SKP File Parser memory corruptionNieznanyNot DefinedOfficial Fix0.000000.02CVE-2022-43651
2023-03-307.37.2Bentley MicroStation CONNECT IFC File Parser information disclosureNieznanyNot DefinedNot Defined0.000880.00CVE-2022-28647
2023-03-308.18.0Bentley MicroStation CONNECT IFC File Parser memory corruptionNieznanyNot DefinedNot Defined0.000880.00CVE-2022-28646
2023-03-308.18.0Bentley MicroStation CONNECT DGN File Parser memory corruptionNieznanyNot DefinedNot Defined0.000880.00CVE-2022-28644
2023-03-308.18.0Bentley MicroStation CONNECT DGN File Parser memory corruptionNieznanyNot DefinedNot Defined0.000880.04CVE-2022-28643
2023-03-308.38.2Bentley MicroStation CONNECT DGN File Parser memory corruptionNieznanyNot DefinedNot Defined0.000880.00CVE-2022-28642
2023-03-308.18.0Bentley View 3DM File Parser Remote Code ExecutionNieznanyNot DefinedNot Defined0.000880.00CVE-2022-28320
2023-03-308.18.0Bentley MicroStation CONNECT 3DM File Parser Remote Code ExecutionNieznanyNot DefinedNot Defined0.000880.00CVE-2022-28319
2023-03-308.18.0Bentley MicroStation CONNECT IFC File Parser memory corruptionNieznanyNot DefinedNot Defined0.000880.00CVE-2022-28318
2023-03-307.37.2Bentley MicroStation CONNECT IFC File Parser Remote Code ExecutionNieznanyNot DefinedNot Defined0.000880.04CVE-2022-28317
2023-03-308.18.0Bentley MicroStation CONNECT IFC File Parser memory corruptionNieznanyNot DefinedNot Defined0.000880.00CVE-2022-28316
2023-03-308.18.0Bentley MicroStation CONNECT IFC File Parser memory corruptionNieznanyNot DefinedNot Defined0.000940.00CVE-2022-28315
2023-03-308.18.0Bentley MicroStation CONNECT IFC File Parser memory corruptionNieznanyNot DefinedNot Defined0.000880.00CVE-2022-28314
2023-03-308.18.0Bentley MicroStation CONNECT DXF File Parser information disclosureNieznanyNot DefinedNot Defined0.000880.00CVE-2022-28311
2023-03-308.18.0Bentley View DXF File Parser information disclosureNieznanyNot DefinedNot Defined0.000880.00CVE-2022-28307
2023-03-308.18.0Bentley MicroStation CONNECT OBJ File Parser memory corruptionNieznanyNot DefinedNot Defined0.000940.00CVE-2022-28306
2023-03-308.38.2Bentley MicroStation CONNECT OBJ File Parser memory corruptionNieznanyNot DefinedNot Defined0.000940.00CVE-2022-28305
2023-03-308.18.0Bentley MicroStation CONNECT OBJ File Parser memory corruptionNieznanyNot DefinedNot Defined0.000940.00CVE-2022-28304

197 więcej wpisów nie jest pokazywanych

Do you want to use VulDB in your project?

Use the official API to access entries easily!