Skip to content
OpenAdvisories
Medium · 6.8 CVE-2022-1743 EUVD-2022-25024GHSA-6v3v-m4wm-chjf

2.2.5 PATH TRAVERSAL: '../FILEDIR' CWE-24

Published Jun 24, 2022 · Updated Apr 17, 2025 · Assigned by icscert

Description

The tested version of Dominion Voting System ImageCast X can be manipulated to cause arbitrary code execution by specially crafted election definition files. An attacker could leverage this vulnerability to spread malicious code to ImageCast X devices from the EMS.

Affected products

VendorProductAffectedFixed
Dominion Voting System ImageCast X application Version 5.5-A Versions 5.5.10.30 and 5.5.10.32 —
Dominion Voting System ImageCast X firmware Version 5.5-A —

Advisories 1

References