CVE-2022-1746
2.2.8 INCORRECT PRIVILEGE ASSIGNMENT CWE-266
- State
- Published
- Severity
- 7.6 High
- Published
- Jun 24, 2022
- Updated
- Apr 17, 2025
- Reserved
- May 16, 2022
Description
The authentication mechanism used by poll workers to administer voting using the tested version of Dominion Voting Systems ImageCast X can expose cryptographic secrets used to protect election information. An attacker could leverage this vulnerability to gain access to sensitive information and perform privileged actions, potentially affecting other election equipment.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.6 High | CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H | CISA-ADP |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
ImageCast X applicationDominion Voting Systems |
|
ImageCast X firmwareDominion Voting Systems |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.