#Imagecast dominion voting systems install#

An attacker with physical access may use this to gain administrative privileges on a device and install malicious code or perform arbitrary administrative actions.Д¬VE-2022-1745В has been assigned to this vulnerability.Дў.2.8 INCORRECT PRIVILEGE ASSIGNMENT CWE-266 The authentication mechanism used by technicians on the tested version of ImageCast X is susceptible to forgery. An attacker could leverage this vulnerability to escalate privileges on a device and/or install malicious code.Д¬VE-2022-1744В has been assigned to this vulnerability.Дў.2.7 AUTHENTICATION BYPASS BY SPOOFING CWE-290 An attacker could leverage this vulnerability to spread malicious code to ImageCast X devices from the EMS.Д¬VE-2022-1743В has been assigned to this vulnerability.Дў.2.6 EXECUTION WITH UNNECESSARY PRIVILEGES CWE-250ДЄpplications on the tested version of ImageCast X can execute code with elevated privileges by exploiting a system level service. The tested version of ImageCast X can be manipulated to cause arbitrary code execution by specially crafted election definition files.

An attacker could leverage this vulnerability to escalate privileges on a device and/or install malicious code.Д¬VE-2022-1742В has been assigned to this vulnerability.Дў.2.5 PATH TRAVERSAL: вЂ./FILEDIRвЂ™ CWE-24 The tested version of ImageCast X allows for rebooting into Android Safe Mode, which allows an attacker to directly access the operating system.

The tested version of ImageCast X has a Terminal Emulator application which could be leveraged by an attacker to gain elevated privileges on a device and/or install malicious code.Д¬VE-2022-1741В has been assigned to this vulnerability.Дў.2.4 IMPROPER PROTECTION OF ALTERNATE PATH CWE-424

Imagecast dominion voting systems