CVE:CVE-2021-46596
CNNVD:CNNVD-202201-2766
Bentley Systems MicroStation是美国Bentley Systems公司的一个用于二维和三维设计和绘图的 Cad 软件平台。
Bentley MicroStation CONNECT 存在缓冲区错误漏洞，此漏洞允许远程攻击者在受影响的 Bentley MicroStation CONNECT 安装上执行任意代码。要利用此漏洞需要用户交互，因为目标必须访问恶意页面或打开恶意文件。
solution:Upgrade bentley microstation to a higher version than 10.16.02,and avoid the version (,10.16.02); Upgrade bentley microstation_connect to a higher version than 10.16.0.80,and avoid the version 10.16.0.80; Upgrade bentley view to a higher version than 10.16.02,and avoid the version (,10.16.02)