CVE-2022-1740
CVE-2022-1740 is a medium-severity vulnerability in Dominionvoting Imagecast X with a CVSS 3.x base score of 4.6. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-1283.
Key facts
- Severity: Medium (CVSS 3.x base score 4.6)
- CVSS v2: 2.1
- EPSS exploit prediction: 0% (13th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-1283
- Affected product: Dominionvoting Imagecast X
- Published:
- Last modified:
Description
The tested version of Dominion Voting Systems ImageCast X’s on-screen application hash display feature, audit log export, and application export functionality rely on self-attestation mechanisms. An attacker could leverage this vulnerability to disguise malicious applications on a device.
Frequently asked questions
- What is CVE-2022-1740?
- The tested version of Dominion Voting Systems ImageCast X’s on-screen application hash display feature, audit log export, and application export functionality rely on self-attestation mechanisms. An attacker could leverage this vulnerability to disguise malicious applications on a device.
- How severe is CVE-2022-1740?
- CVE-2022-1740 has a CVSS 3.x base score of 4.6, rated medium severity. It is exploitable over physical access with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity high, and availability none.
- Is CVE-2022-1740 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (13th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2022-1740?
- CVE-2022-1740 primarily affects Dominionvoting Imagecast X. In total, 3 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2022-1740?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2022-1740 published?
- CVE-2022-1740 was published on 2022-06-24 and last updated on 2026-06-17.
References
Affected products (3)
- cpe:2.3:o:dominionvoting:imagecast_x:*:*:*:*:*:*:*:*
- cpe:2.3:a:dominionvoting:imagecast_x:5.5.10.30:*:*:*:*:*:*:*
- cpe:2.3:a:dominionvoting:imagecast_x:5.5.10.32:*:*:*:*:*:*:*
More vulnerabilities in Dominionvoting Imagecast X
- CVE-2022-1746 — High (CVSS 7.6): The authentication mechanism used by poll workers to administer voting using the tested version of Dominion Voting…
- CVE-2022-1745 — Medium (CVSS 6.8): The authentication mechanism used by technicians on the tested version of Dominion Voting Systems ImageCast X is…
- CVE-2022-1744 — Medium (CVSS 6.8): Applications on the tested version of Dominion Voting Systems ImageCast X can execute code with elevated privileges by…
- CVE-2022-1743 — Medium (CVSS 6.8): The tested version of Dominion Voting System ImageCast X can be manipulated to cause arbitrary code execution by…
- CVE-2022-1742 — Medium (CVSS 6.8): The tested version of Dominion Voting Systems ImageCast X allows for rebooting into Android Safe Mode, which allows an…
- CVE-2022-1741 — Medium (CVSS 6.8): The tested version of Dominion Voting Systems ImageCast X has a Terminal Emulator application which could be leveraged…
All CVEs affecting Dominionvoting Imagecast X →
Other CWE-1283 vulnerabilities
- CVE-2024-29038 — Medium (CVSS 4.3): tpm2-tools is the source repository for the Trusted Platform Module (TPM2.0) tools. A malicious attacker can generate…
- CVE-2023-3674 — Low (CVSS 2.3): A flaw was found in the keylime attestation verifier, which fails to flag a device's submitted TPM quote as faulty when…