dominionvoting records
10 published records for vendor dominionvoting.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Recurring classes
- CWE-1283 Mutable Attestation or Measurement Reporting Data1
- CWE-24 Path Traversal: '../filedir'1
- CWE-250 Execution with Unnecessary Privileges1
- CWE-266 Incorrect Privilege Assignment1
- CWE-290 Authentication Bypass by Spoofing1
- CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
10 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
30Monitor | CVE-2022-1746No exploit | 2.2.8 INCORRECT PRIVILEGE ASSIGNMENT CWE-266dominionvoting · imagecast x · CWE-266 | High7.6 | 0.2%Jun 24, 2022 |
27Monitor | CVE-2022-1743No exploit | 2.2.5 PATH TRAVERSAL: '../FILEDIR' CWE-24dominionvoting · imagecast x · CWE-24 | Medium6.8 | 0.3%Jun 24, 2022 |
27Monitor | CVE-2022-1744No exploit | 2.2.6 EXECUTION WITH UNNECESSARY PRIVILEGES CWE-250dominionvoting · imagecast x · CWE-250 | Medium6.8 | 0.3%Jun 24, 2022 |
27Monitor | CVE-2022-1745No exploit | 2.2.7 AUTHENTICATION BYPASS BY SPOOFING CWE-290dominionvoting · imagecast x · CWE-290 | Medium6.8 | 0.2%Jun 24, 2022 |
27Monitor | CVE-2022-1741No exploit | 2.2.3 HIDDEN FUNCTIONALITY CWE-912dominionvoting · imagecast x · CWE-912 | Medium6.8 | 0.2%Jun 24, 2022 |
27Monitor | CVE-2022-1742No exploit | 2.2.4 IMPROPER PROTECTION OF ALTERNATE PATH CWE-424dominionvoting · imagecast x · CWE-424 | Medium6.8 | 0.2%Jun 24, 2022 |
27Monitor | CVE-2022-1739No exploit | 2.2.1 IMPROPER VERIFICATION OF CRYPTOGRAPHIC SIGNATURE CWE-347dominionvoting · imagecast x · CWE-347 | Medium6.8 | 0.1%Jun 24, 2022 |
18Monitor | CVE-2022-1740No exploit | 2.2.2 MUTABLE ATTESTATION OR MEASUREMENT REPORTING DATA CWE-1283dominionvoting · imagecast x · CWE-1283 | Medium4.6 | 0.2%Jun 24, 2022 |
18Monitor | CVE-2022-1747No exploit | The authentication mechanism used by voters to activate a voting session on the tested version of Dominion Voting Systems ImageCast X is susdominionvoting · imagecast x · CWE-346 | Medium4.6 | 0.1%Jun 24, 2022 |
9Monitor | CVE-2022-48506No exploit | A flawed pseudorandom number generator in Dominion Voting Systems ImageCast Precinct (ICP and ICP2) and ImageCast Evolution (ICE) scanners adominionvoting · democracy suite · CWE-338 | Low2.4 | 0.3%Jun 19, 2023 |
- CVE-2022-174630Monitor
2.2.8 INCORRECT PRIVILEGE ASSIGNMENT CWE-266
HighCVSS 7.6No exploitEPSS 0%dominionvoting · imagecast xJun 24, 2022
- CVE-2022-174327Monitor
2.2.5 PATH TRAVERSAL: '../FILEDIR' CWE-24
MediumCVSS 6.8No exploitEPSS 0%dominionvoting · imagecast xJun 24, 2022
- CVE-2022-174427Monitor
2.2.6 EXECUTION WITH UNNECESSARY PRIVILEGES CWE-250
MediumCVSS 6.8No exploitEPSS 0%dominionvoting · imagecast xJun 24, 2022
- CVE-2022-174527Monitor
2.2.7 AUTHENTICATION BYPASS BY SPOOFING CWE-290
MediumCVSS 6.8No exploitEPSS 0%dominionvoting · imagecast xJun 24, 2022
- CVE-2022-174127Monitor
2.2.3 HIDDEN FUNCTIONALITY CWE-912
MediumCVSS 6.8No exploitEPSS 0%dominionvoting · imagecast xJun 24, 2022
- CVE-2022-174227Monitor
2.2.4 IMPROPER PROTECTION OF ALTERNATE PATH CWE-424
MediumCVSS 6.8No exploitEPSS 0%dominionvoting · imagecast xJun 24, 2022
- CVE-2022-173927Monitor
2.2.1 IMPROPER VERIFICATION OF CRYPTOGRAPHIC SIGNATURE CWE-347
MediumCVSS 6.8No exploitEPSS 0%dominionvoting · imagecast xJun 24, 2022
- CVE-2022-174018Monitor
2.2.2 MUTABLE ATTESTATION OR MEASUREMENT REPORTING DATA CWE-1283
MediumCVSS 4.6No exploitEPSS 0%dominionvoting · imagecast xJun 24, 2022
- CVE-2022-174718Monitor
The authentication mechanism used by voters to activate a voting session on the tested version of Dominion Voting Systems ImageCast X is sus
MediumCVSS 4.6No exploitEPSS 0%dominionvoting · imagecast xJun 24, 2022
- CVE-2022-485069Monitor
A flawed pseudorandom number generator in Dominion Voting Systems ImageCast Precinct (ICP and ICP2) and ImageCast Evolution (ICE) scanners a
LowCVSS 2.4No exploitEPSS 0%dominionvoting · democracy suiteJun 19, 2023