581 matches found
CVE-2022-1743
The tested version of Dominion Voting System ImageCast X can be manipulated to cause arbitrary code execution by specially crafted election definition files. An attacker could leverage this vulnerability to spread malicious code to ImageCast X devices from the EMS...
Code injection
The tested version of Dominion Voting System ImageCast X can be manipulated to cause arbitrary code execution by specially crafted election definition files. An attacker could leverage this vulnerability to spread malicious code to ImageCast X devices from the EMS...
Authentication flaw
The authentication mechanism used by poll workers to administer voting using the tested version of Dominion Voting Systems ImageCast X can expose cryptographic secrets used to protect election information. An attacker could leverage this vulnerability to gain access to sensitive information and...
CVE-2022-1743 2.2.5 PATH TRAVERSAL: '../FILEDIR' CWE-24
The tested version of Dominion Voting System ImageCast X can be manipulated to cause arbitrary code execution by specially crafted election definition files. An attacker could leverage this vulnerability to spread malicious code to ImageCast X devices from the EMS...
CVE-2022-1746
CVE-2022-1746 concerns Dominion Voting Systems ImageCast X. The vulnerability is an authentication/privilege assignment flaw in the poll-worker authentication mechanism that could expose cryptographic secrets protecting election information. An attacker could leverage this to access sensitive dat...
CVE-2022-1746 2.2.8 INCORRECT PRIVILEGE ASSIGNMENT CWE-266
The authentication mechanism used by poll workers to administer voting using the tested version of Dominion Voting Systems ImageCast X can expose cryptographic secrets used to protect election information. An attacker could leverage this vulnerability to gain access to sensitive information and...
CVE-2022-1746 2.2.8 INCORRECT PRIVILEGE ASSIGNMENT CWE-266
The authentication mechanism used by poll workers to administer voting using the tested version of Dominion Voting Systems ImageCast X can expose cryptographic secrets used to protect election information. An attacker could leverage this vulnerability to gain access to sensitive information and...
CVE-2022-1743: Path Traversal: '../filedir'
The tested version of Dominion Voting System ImageCast X can be manipulated to cause arbitrary code execution by specially crafted election definition files. An attacker could leverage this vulnerability to spread malicious code to ImageCast X devices from the EMS...
MAL-2022-1033 Malicious code in ap-election-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25d8b331987758c8e999e446fd9c69fb068900206694fe5bee21b7abd2932512 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ap-election-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25d8b331987758c8e999e446fd9c69fb068900206694fe5bee21b7abd2932512 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Dominion Voting Systems ImageCast X path traversal vulnerability
Dominion Voting Systems ImageCast X is an intuitive and configurable face-to-face voting solution from Dominion Voting Systems.A path traversal vulnerability exists in Dominion Voting Systems ImageCast X, which could be exploited by an attacker to propagate malicious code from EMS to propagate to...
Dominion Voting Systems ImageCast X security vulnerability
Dominion Voting Systems ImageCast X is an intuitive and configurable face-to-face voting solution from Dominion Voting Systems, Inc. A security vulnerability exists in Dominion Voting Systems ImageCast X that could be exploited by an attacker to obtain sensitive information and perform privileged...
Dominion Voting Systems ImageCast X has an unspecified vulnerability (CNVD-2022-77546)
Dominion Voting Systems ImageCast X is an intuitive and configurable face-to-face voting solution from Dominion Voting Systems, Inc. A security vulnerability exists in Dominion Voting Systems ImageCast X that could be exploited by an attacker to obtain sensitive information and perform privileged...
PT-2022-3258
Name of the Vulnerable Software and Affected Versions Dominion Voting System ImageCast X affected versions not specified Description The issue is related to the manipulation of Dominion Voting System ImageCast X devices through specially crafted election definition files, allowing for arbitrary...
PT-2022-3264
Name of the Vulnerable Software and Affected Versions Dominion Voting Systems ImageCast X affected versions not specified Description The issue is related to the authentication mechanism used by administrators of the ImageCast X device, which is associated with errors in privilege assignment. Thi...
CISA Releases Security Advisory on Dominion Voting Systems Democracy Suite ImageCast X
CISA has released an Industrial Controls Systems Advisory ICSA detailing vulnerabilities affecting versions of the Dominion Voting Systems Democracy Suite ImageCast X, which is an in-person voting system used to allow voters to mark their ballot. Exploitation of these vulnerabilities would requir...
Ransomware attack turns 2022 into 1977 for Somerset County
1977 was quite the year. Led Zeppelin! Jimmy Carter! Saturday Night Fever! We can now add "a ransomware attack" to this once static list. Somerset County, New Jersey, has been hit so hard by a network assault that theyve ended up in the direst straits imaginable, with county databases unavailable...
FBI Conducted 3.4 Million Warrantless Searches of Americans' Data
Plus: Trump backers breach election systems, Microsoft tracks Russia's war prep, a new Facebook leak reveals a mess, and Bored Ape Yacht Club gets hacked...
FBI Releases PIN on Phishing Campaign against U.S. Election Officials
The Federal Bureau of Investigation FBI has released a Private Industry Notification PIN to warn U.S. election and other state and local government officials about invoice-themed phishing emails that could be used to harvest officials’ login credentials. CISA encourages federal, state, and local...