CVE-2021-46573 : Security Advisory and Response

This CVE-2021-46573 article provides detailed information about a vulnerability in MicroStation CONNECT by Bentley.

Understanding CVE-2021-46573

This section delves into the vulnerability's nature and impact.

What is CVE-2021-46573?

CVE-2021-46573 allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80 by exploiting a flaw in the parsing of JT files.

The Impact of CVE-2021-46573

The vulnerability has a high severity rating according to CVSS V3.0, with a base score of 7.8. It requires user interaction and can result in high impacts on confidentiality, integrity, and availability.

Technical Details of CVE-2021-46573

This section outlines the technical aspects of the CVE.

Vulnerability Description

The vulnerability stems from a lack of object validation in JT file parsing, enabling attackers to execute code within the current process.

Affected Systems and Versions

Product: MicroStation CONNECT
Vendor: Bentley
Version: 10.16.0.80

Exploitation Mechanism

To exploit this vulnerability, a target must visit a malicious page or open a malicious file.

Mitigation and Prevention

Learn the necessary steps to mitigate and prevent exploitation.

Immediate Steps to Take

Update MicroStation CONNECT to a patched version immediately.
Avoid visiting suspicious websites or opening untrusted files.

Long-Term Security Practices

Implement regular security training for users to recognize and avoid malicious content.
Keep software and systems up-to-date with the latest security patches.

Patching and Updates

Apply any security patches or updates released by Bentley to address CVE-2021-46573.