← CVE Intelligence

CVE-2022-1745

2.2.7 AUTHENTICATION BYPASS BY SPOOFING CWE-290 PUBLISHED

Description (CNA)

The authentication mechanism used by technicians on the tested version of Dominion Voting Systems ImageCast X is susceptible to forgery. An attacker with physical access may use this to gain administrative privileges on a device and install malicious code or perform arbitrary administrative actions.

Affected (CNA)

Vendor / productVersions
Dominion Voting Systems / ImageCast X applicationaffected Version 5.5-A Versions 5.5.10.30 and 5.5.10.32
Dominion Voting Systems / ImageCast X firmwareaffected Version 5.5-A

CWE

CWE-290

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.