Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2022-1743

2.2.5 PATH TRAVERSAL: '../FILEDIR' CWE-24

Description

The tested version of Dominion Voting System ImageCast X can be manipulated to cause arbitrary code execution by specially crafted election definition files. An attacker could leverage this vulnerability to spread malicious code to ImageCast X devices from the EMS.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Dominion Voting System ImageCast X application

  • Version 5.5-A Versions 5.5.10.30 and 5.5.10.32affected

Dominion Voting System ImageCast X firmware

  • Version 5.5-Aaffected

References