CVE-2022-1740 2.2.2 MUTABLE ATTESTATION OR MEASUREMENT REPORTING DATA CWE-1283

🗓️ 24 Jun 2022 15:00:27Reported by icscertType

The Dominion Voting Systems ImageCast X's on-screen application hash display, audit log export, and application export functionality are vulnerable to self-attestation attack

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	The vulnerability of the display functions for hash functions of the application, as well as the export of audit logs and software for marking ballots with the ImageCast X device, allows a perpetrator to gain unauthorized access to protected information.	6 Jul 202200:00	–	bdu_fstec
Circl	CVE-2022-1740	17 Apr 202518:58	–	circl
CNNVD	Dominion Voting Systems ImageCast X 安全漏洞	6 Jun 202200:00	–	cnnvd
CNVD	Dominion Voting Systems ImageCast X has an unspecified vulnerability	5 Jun 202200:00	–	cnvd
CVE	CVE-2022-1740	24 Jun 202215:00	–	cve
EUVD	EUVD-2022-25021	3 Oct 202520:07	–	euvd
ICS	Vulnerabilities Affecting Dominion Voting Systems ImageCast X	3 Jun 202200:00	–	ics
NVD	CVE-2022-1740	24 Jun 202215:15	–	nvd
OSV	CVE-2022-1740	24 Jun 202215:15	–	osv
Prion	Design/Logic Flaw	24 Jun 202215:15	–	prion

[
  {
    "product": "ImageCast X application",
    "vendor": "Dominion Voting Systems",
    "versions": [
      {
        "status": "affected",
        "version": "Version 5.5-A Versions 5.5.10.30 and 5.5.10.32"
      }
    ]
  },
  {
    "product": "ImageCast X firmware",
    "vendor": "Dominion Voting Systems",
    "versions": [
      {
        "status": "affected",
        "version": "Version 5.5-A"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/uscert/ics/advisories/icsa-22-154-01

24 Jun 2022 15:00Current

5Medium risk

Vulners AI Score5

EPSS0.00108

CWE-1283