CVE-2022-1743 — 2.2.5 PATH TRAVERSAL: '../FILEDIR' CWE-24

Description (CNA)

The tested version of Dominion Voting System ImageCast X can be manipulated to cause arbitrary code execution by specially crafted election definition files. An attacker could leverage this vulnerability to spread malicious code to ImageCast X devices from the EMS.

Affected (CNA)

Vendor / product	Versions
Dominion Voting System / ImageCast X application	affected Version 5.5-A Versions 5.5.10.30 and 5.5.10.32
Dominion Voting System / ImageCast X firmware	affected Version 5.5-A

CWE

CWE-24

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-154-01

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-22-154-01

CISA-ADP

No English description supplied.

No references supplied.