CVE-2022-1740 2.2.2 MUTABLE ATTESTATION OR MEASUREMENT REPORTING DATA CWE-1283

The tested version of Dominion Voting Systems ImageCast X’s on-screen application hash display feature, audit log export, and application export functionality rely on self-attestation mechanisms. An attacker could leverage this vulnerability to disguise malicious applications on a device...

CVE-2022-1742 2.2.4 IMPROPER PROTECTION OF ALTERNATE PATH CWE-424

The tested version of Dominion Voting Systems ImageCast X allows for rebooting into Android Safe Mode, which allows an attacker to directly access the operating system. An attacker could leverage this vulnerability to escalate privileges on a device and/or install malicious code...

CVE-2022-1742 2.2.4 IMPROPER PROTECTION OF ALTERNATE PATH CWE-424

The tested version of Dominion Voting Systems ImageCast X allows for rebooting into Android Safe Mode, which allows an attacker to directly access the operating system. An attacker could leverage this vulnerability to escalate privileges on a device and/or install malicious code...

CVE-2022-1742

The CVE-2022-1742 issue affects Dominion Voting Systems ImageCast X. It is tracked under CWE-424 (IMPROPER PROTECTION OF ALTERNATE PATH) and enables rebooting into Android Safe Mode, allowing direct OS access and potential privilege escalation with the risk of installing malicious code. The NVD/C...

CVE-2022-1743 2.2.5 PATH TRAVERSAL: '../FILEDIR' CWE-24

The tested version of Dominion Voting System ImageCast X can be manipulated to cause arbitrary code execution by specially crafted election definition files. An attacker could leverage this vulnerability to spread malicious code to ImageCast X devices from the EMS...

CVE-2022-1743 2.2.5 PATH TRAVERSAL: '../FILEDIR' CWE-24

The tested version of Dominion Voting System ImageCast X can be manipulated to cause arbitrary code execution by specially crafted election definition files. An attacker could leverage this vulnerability to spread malicious code to ImageCast X devices from the EMS...

CVE-2022-1743

CVE-2022-1743 describes a path-traversal vulnerability in Dominion Voting Systems ImageCast X. The issue allows manipulation of the device via specially crafted election definition files to achieve arbitrary code execution on ImageCast X devices, potentially spreading malicious code from the EMS ...

CVE-2022-1741

CVE-2022-1741: A Terminal Emulator in Dominion Voting Systems ImageCast X is identified as a hidden functionality that could be exploited to gain elevated privileges or install malicious code. Documents attribute this vulnerability to CWE-912 (Hidden Functionality) and describe it as part of a se...

CVE-2022-1741 2.2.3 HIDDEN FUNCTIONALITY CWE-912

The tested version of Dominion Voting Systems ImageCast X has a Terminal Emulator application which could be leveraged by an attacker to gain elevated privileges on a device and/or install malicious code...

CVE-2022-1741 2.2.3 HIDDEN FUNCTIONALITY CWE-912

The tested version of Dominion Voting Systems ImageCast X has a Terminal Emulator application which could be leveraged by an attacker to gain elevated privileges on a device and/or install malicious code...

CVE-2022-1744 2.2.6 EXECUTION WITH UNNECESSARY PRIVILEGES CWE-250

Applications on the tested version of Dominion Voting Systems ImageCast X can execute code with elevated privileges by exploiting a system level service. An attacker could leverage this vulnerability to escalate privileges on a device and/or install malicious code...

CVE-2022-1744

CVE-2022-1744 affects Dominion Voting Systems ImageCast X. The vulnerability arises from a system-level service that enables code execution with elevated privileges, allowing an attacker to escalate privileges on a device and potentially install malicious code. Connected sources (ICS/CISA advisor...

CVE-2022-1739 2.2.1 IMPROPER VERIFICATION OF CRYPTOGRAPHIC SIGNATURE CWE-347

The tested version of Dominion Voting Systems ImageCast X does not validate application signatures to a trusted root certificate. Use of a trusted root certificate ensures software installed on a device is traceable to, or verifiable against, a cryptographic key provided by the manufacturer to...

CVE-2022-1739

The CVE-2022-1739 entry concerns Dominion Voting Systems ImageCast X where the tested software does not validate application signatures against a trusted root certificate. This undermines the software’s traceability and tamper-detection, enabling a potential attacker to install malicious code and...

CVE-2022-1739 2.2.1 IMPROPER VERIFICATION OF CRYPTOGRAPHIC SIGNATURE CWE-347

The tested version of Dominion Voting Systems ImageCast X does not validate application signatures to a trusted root certificate. Use of a trusted root certificate ensures software installed on a device is traceable to, or verifiable against, a cryptographic key provided by the manufacturer to...

CVE-2022-1747

The authentication mechanism used by voters to activate a voting session on the tested version of Dominion Voting Systems ImageCast X is susceptible to forgery. An attacker could leverage this vulnerability to print an arbitrary number of ballots without authorization...

CVE-2022-1747

CVE-2022-1747 concerns Dominion Voting Systems ImageCast X where the authentication mechanism used by voters to activate a voting session is susceptible to forgery due to an origin validation error (CWE-346). This could allow an attacker to print an arbitrary number of ballots without authorizati...

CVE-2022-1746

CVE-2022-1746 concerns Dominion Voting Systems ImageCast X. The vulnerability is an authentication/privilege assignment flaw in the poll-worker authentication mechanism that could expose cryptographic secrets protecting election information. An attacker could leverage this to access sensitive dat...

Dominion Voting Systems ImageCast X 安全漏洞

Dominion Voting Systems ImageCast X is an intuitive and configurable face-to-face voting solution from Dominion Voting Systems.A security vulnerability exists in Dominion Voting Systems ImageCast X that could be exploited by an attacker to disguise a malicious application on the device...

Dominion Voting Systems ImageCast X 安全漏洞

Dominion Voting Systems ImageCast X is an intuitive and configurable face-to-face voting solution from Dominion Voting Systems.A security vulnerability exists in Dominion Voting Systems ImageCast X. The vulnerability stems from a hidden feature that could be exploited by an attacker to gain...