Skip to content
OpenAdvisories
Medium · 6.8 CVE-2022-1745 EUVD-2022-25026GHSA-rg2m-7v6j-w3wq

2.2.7 AUTHENTICATION BYPASS BY SPOOFING CWE-290

Published Jun 24, 2022 · Updated Apr 17, 2025 · Assigned by icscert

Description

The authentication mechanism used by technicians on the tested version of Dominion Voting Systems ImageCast X is susceptible to forgery. An attacker with physical access may use this to gain administrative privileges on a device and install malicious code or perform arbitrary administrative actions.

Affected products

VendorProductAffectedFixed
Dominion Voting Systems ImageCast X application Version 5.5-A Versions 5.5.10.30 and 5.5.10.32 —
Dominion Voting Systems ImageCast X firmware Version 5.5-A —

Advisories 1

References