Vulnerabilities Affecting Dominion Voting Systems ImageCast X

🗓️ 03 Jun 2022 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics

ics🔗 www.cisa.gov👁 173 Views

Vulnerabilities in Dominion Voting Systems ImageCast

Reporter	Title	Published	Views	Family All 103
BDU FSTEC	The vulnerability of the authentication mechanism for voting sessions in the software of the ImageCast X device for marking ballots allows a perpetrator to obtain an arbitrary number of ballots without authorization.	29 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ImageCast X ballot marking device’s software lies in its lack of proper path validation when accessing restricted directories. This allows a perpetrator to execute arbitrary code.	29 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ImageCast X ballot marking device’s software, related to access control errors, allows a violator to execute arbitrary code.	29 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ImageCast X ballot marking device’s software lies in the improper protection of an alternative path, allowing a hacker to load the Android Safe Mode and execute arbitrary code.	29 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the authentication mechanism for software administrators of the ImageCast X device for marking ballots allows a perpetrator to escalate their privileges.	29 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ImageCast X ballot marking device’s software relates to the possibility of bypassing the authentication mechanism, allowing a violator to enhance their privileges.	29 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software terminal emulator for the ImageCast X device, which allows a violator to increase their privileges	29 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the display functions for hash functions of the application, as well as the export of audit logs and software for marking ballots with the ImageCast X device, allows a perpetrator to gain unauthorized access to protected information.	6 Jul 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software terminal emulator for the ImageCast X device, related to incorrect verification of the cryptographic signature, allows a perpetrator to execute arbitrary code.	1 Aug 202200:00	–	bdu_fstec
Circl	CVE-2022-1739	24 Jun 202218:31	–	circl

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2022/icsa-22-154-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-22-154-01
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

03 Jun 2022 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.6

CVSS 27.2

EPSS0.00108

SSVC

vulnerabilities dominion voting systems imagecast x voting systems exploitation cisa android firmware application vulnerable versions cryptographic signature trust tampering malicious code vulnerability overview attestation audit log terminal emacher