Lucene search

IcscertCVELIST:CVE-2022-1745

HistoryJun 24, 2022 - 3:00 p.m.

CVE-2022-1745 2.2.7 AUTHENTICATION BYPASS BY SPOOFING CWE-290

2022-06-2415:00:27

CWE-290

icscert

www.cve.org

authentication

dominion voting systems

imagecast x

vulnerability

administrative privilege

AI Score

7.1

Confidence

High

EPSS

0.001

Percentile

24.2%

JSON

The authentication mechanism used by technicians on the tested version of Dominion Voting Systems ImageCast X is susceptible to forgery. An attacker with physical access may use this to gain administrative privileges on a device and install malicious code or perform arbitrary administrative actions.

CNA Affected

[
  {
    "product": "ImageCast X application",
    "vendor": "Dominion Voting Systems",
    "versions": [
      {
        "status": "affected",
        "version": "Version 5.5-A Versions 5.5.10.30 and 5.5.10.32"
      }
    ]
  },
  {
    "product": "ImageCast X firmware",
    "vendor": "Dominion Voting Systems",
    "versions": [
      {
        "status": "affected",
        "version": "Version 5.5-A"
      }
    ]
  }
]

References

www.cisa.gov/uscert/ics/advisories/icsa-22-154-01