CVE-2022-1746

EUVD-2022-25027 · Published Jun 24, 2022

The authentication mechanism used by poll workers to administer voting using the tested version of Dominion Voting Systems ImageCast X can expose cryptographic secrets used to protect election information. An attacker could leverage this vulnerability to gain access to sensitive information and perform privileged actions, potentially affecting other election equipment.

Technologies

Dominionvoting Democracy SuiteDominionvoting Imagecast X

Weaknesses

CWE-266CWE-863

CVSS scores

v3.17.6CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
v2.07.2AV:L/AC:L/Au:N/C:C/I:C/A:C

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Privilege Escalation

T1068Exploitation for Privilege Escalation

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-154-01

Potentially impacted assets

See if this affects your attack surface