Read the docs

Dominion Voting Systems

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Dominion Voting Systems records in CISA KEV

No Dominion Voting Systems vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

9 records in Imagecast X · all components

Priority LOW 35

The authentication mechanism used by poll workers to administer voting using the tested version of Dominion Voting Systems ImageCast X can expose cryptographic secrets used to protect election information.

CVSS 3.1HIGH 7.6 Physical No auth No interaction EPSS 0.00296 Published 2022-06-24 No fix listed CWE-266
Priority LOW 32

The authentication mechanism used by technicians on the tested version of Dominion Voting Systems ImageCast X is susceptible to forgery.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00294 Published 2022-06-24 No fix listed CWE-290
Priority LOW 32

Applications on the tested version of Dominion Voting Systems ImageCast X can execute code with elevated privileges by exploiting a system level service.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00313 Published 2022-06-24 No fix listed CWE-250
TI-2022-01609 CVE-2022-1743 · GHSA-6v3v-m4wm-chjf

2.2.5 PATH TRAVERSAL: '../FILEDIR' CWE-24

Priority LOW 32

The tested version of Dominion Voting System ImageCast X can be manipulated to cause arbitrary code execution by specially crafted election definition files.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00393 Published 2022-06-24 No fix listed CWE-24
Priority LOW 32

The tested version of Dominion Voting Systems ImageCast X allows for rebooting into Android Safe Mode, which allows an attacker to directly access the operating system.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00284 Published 2022-06-24 No fix listed CWE-424
TI-2022-01607 CVE-2022-1741 · GHSA-q36w-mwcg-f7m3

2.2.3 HIDDEN FUNCTIONALITY CWE-912

Priority LOW 32

The tested version of Dominion Voting Systems ImageCast X has a Terminal Emulator application which could be leveraged by an attacker to gain elevated privileges on a device and/or install malicious code.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00284 Published 2022-06-24 No fix listed CWE-912
Priority LOW 31

The tested version of Dominion Voting Systems ImageCast X does not validate application signatures to a trusted root certificate.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00141 Published 2022-06-24 No fix listed CWE-347
Priority LOW 21

The tested version of Dominion Voting Systems ImageCast X’s on-screen application hash display feature, audit log export, and application export functionality rely on self-attestation mechanisms.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00235 Published 2022-06-24 No fix listed CWE-1283
Open these records in search →