CVE-2022-1742

The CVE-2022-1742 issue affects Dominion Voting Systems ImageCast X. It is tracked under CWE-424 (IMPROPER PROTECTION OF ALTERNATE PATH) and enables rebooting into Android Safe Mode, allowing direct OS access and potential privilege escalation with the risk of installing malicious code. The NVD/C...

CVE-2022-1742 2.2.4 IMPROPER PROTECTION OF ALTERNATE PATH CWE-424

The tested version of Dominion Voting Systems ImageCast X allows for rebooting into Android Safe Mode, which allows an attacker to directly access the operating system. An attacker could leverage this vulnerability to escalate privileges on a device and/or install malicious code...

CVE-2022-1742 2.2.4 IMPROPER PROTECTION OF ALTERNATE PATH CWE-424

The tested version of Dominion Voting Systems ImageCast X allows for rebooting into Android Safe Mode, which allows an attacker to directly access the operating system. An attacker could leverage this vulnerability to escalate privileges on a device and/or install malicious code...

CVE-2022-1741 2.2.3 HIDDEN FUNCTIONALITY CWE-912

The tested version of Dominion Voting Systems ImageCast X has a Terminal Emulator application which could be leveraged by an attacker to gain elevated privileges on a device and/or install malicious code...

CVE-2022-1741

CVE-2022-1741: A Terminal Emulator in Dominion Voting Systems ImageCast X is identified as a hidden functionality that could be exploited to gain elevated privileges or install malicious code. Documents attribute this vulnerability to CWE-912 (Hidden Functionality) and describe it as part of a se...

CVE-2022-1741 2.2.3 HIDDEN FUNCTIONALITY CWE-912

The tested version of Dominion Voting Systems ImageCast X has a Terminal Emulator application which could be leveraged by an attacker to gain elevated privileges on a device and/or install malicious code...

CVE-2022-1744 2.2.6 EXECUTION WITH UNNECESSARY PRIVILEGES CWE-250

Applications on the tested version of Dominion Voting Systems ImageCast X can execute code with elevated privileges by exploiting a system level service. An attacker could leverage this vulnerability to escalate privileges on a device and/or install malicious code...

CVE-2022-1744 2.2.6 EXECUTION WITH UNNECESSARY PRIVILEGES CWE-250

Applications on the tested version of Dominion Voting Systems ImageCast X can execute code with elevated privileges by exploiting a system level service. An attacker could leverage this vulnerability to escalate privileges on a device and/or install malicious code...

CVE-2022-1744

CVE-2022-1744 affects Dominion Voting Systems ImageCast X. The vulnerability arises from a system-level service that enables code execution with elevated privileges, allowing an attacker to escalate privileges on a device and potentially install malicious code. Connected sources (ICS/CISA advisor...

CVE-2022-1747

The authentication mechanism used by voters to activate a voting session on the tested version of Dominion Voting Systems ImageCast X is susceptible to forgery. An attacker could leverage this vulnerability to print an arbitrary number of ballots without authorization...

CVE-2022-1739 2.2.1 IMPROPER VERIFICATION OF CRYPTOGRAPHIC SIGNATURE CWE-347

The tested version of Dominion Voting Systems ImageCast X does not validate application signatures to a trusted root certificate. Use of a trusted root certificate ensures software installed on a device is traceable to, or verifiable against, a cryptographic key provided by the manufacturer to...

CVE-2022-1739 2.2.1 IMPROPER VERIFICATION OF CRYPTOGRAPHIC SIGNATURE CWE-347

The tested version of Dominion Voting Systems ImageCast X does not validate application signatures to a trusted root certificate. Use of a trusted root certificate ensures software installed on a device is traceable to, or verifiable against, a cryptographic key provided by the manufacturer to...

CVE-2022-1747

The authentication mechanism used by voters to activate a voting session on the tested version of Dominion Voting Systems ImageCast X is susceptible to forgery. An attacker could leverage this vulnerability to print an arbitrary number of ballots without authorization...

CVE-2022-1747

CVE-2022-1747 concerns Dominion Voting Systems ImageCast X where the authentication mechanism used by voters to activate a voting session is susceptible to forgery due to an origin validation error (CWE-346). This could allow an attacker to print an arbitrary number of ballots without authorizati...

CVE-2022-1739

The CVE-2022-1739 entry concerns Dominion Voting Systems ImageCast X where the tested software does not validate application signatures against a trusted root certificate. This undermines the software’s traceability and tamper-detection, enabling a potential attacker to install malicious code and...

CVE-2022-1746

CVE-2022-1746 concerns Dominion Voting Systems ImageCast X. The vulnerability is an authentication/privilege assignment flaw in the poll-worker authentication mechanism that could expose cryptographic secrets protecting election information. An attacker could leverage this to access sensitive dat...

Dominion Voting Systems ImageCast X 数据伪造问题漏洞

Dominion Voting Systems ImageCast X, Dominion Voting Systems' intuitive and configurable face-to-face voting solution, is vulnerable to a data forgery issue stemming from incorrect validation of password signatures, which could be exploited to install malicious code. The vulnerability can be...

Dominion Voting Systems ImageCast X 安全漏洞

Dominion Voting Systems ImageCast X is an intuitive and configurable face-to-face voting solution from Dominion Voting Systems.An authentication bypass vulnerability exists in Dominion Voting Systems ImageCast X, which could be exploited by an attacker to gain access to the device's management...

Dominion Voting Systems ImageCast X 安全漏洞

Dominion Voting Systems ImageCast X is an intuitive and configurable face-to-face voting solution from Dominion Voting Systems.A security vulnerability exists in Dominion Voting Systems ImageCast X, which could be exploited by an attacker to elevate the privileges of a device or install malicious...

Dominion Voting Systems ImageCast X 路径遍历漏洞

Dominion Voting Systems ImageCast X is an intuitive and configurable face-to-face voting solution from Dominion Voting Systems.A path traversal vulnerability exists in Dominion Voting Systems ImageCast X, which could be exploited by an attacker to propagate malicious code from EMS to propagate to...