How severe is CVE-2022-1743?

CVE-2022-1743 has a CVSS 3.x base score of 6.8, rated medium severity. It is exploitable over physical access with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.

Is CVE-2022-1743 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (30th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2022-1743?

CVE-2022-1743 primarily affects Dominionvoting Imagecast X. In total, 3 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2022-1743?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2022-1743 published?

CVE-2022-1743 was published on 2022-06-24 and last updated on 2026-06-17.

CVE-2022-1743

CVE-2022-1743 is a medium-severity vulnerability in Dominionvoting Imagecast X with a CVSS 3.x base score of 6.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-24.

Key facts

Severity: Medium (CVSS 3.x base score 6.8)
CVSS v2: 7.2
EPSS exploit prediction: 0% (30th percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-24
Affected product: Dominionvoting Imagecast X
Published: 2022-06-24
Last modified: 2026-06-17

Description

The tested version of Dominion Voting System ImageCast X can be manipulated to cause arbitrary code execution by specially crafted election definition files. An attacker could leverage this vulnerability to spread malicious code to ImageCast X devices from the EMS.

Frequently asked questions

What is CVE-2022-1743?: The tested version of Dominion Voting System ImageCast X can be manipulated to cause arbitrary code execution by specially crafted election definition files. An attacker could leverage this vulnerability to spread malicious code to ImageCast X devices from the EMS.
How severe is CVE-2022-1743?: CVE-2022-1743 has a CVSS 3.x base score of 6.8, rated medium severity. It is exploitable over physical access with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
Is CVE-2022-1743 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (30th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2022-1743?: CVE-2022-1743 primarily affects Dominionvoting Imagecast X. In total, 3 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2022-1743?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2022-1743 published?: CVE-2022-1743 was published on 2022-06-24 and last updated on 2026-06-17.

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-154-01

Affected products (3)

cpe:2.3:o:dominionvoting:imagecast_x:*:*:*:*:*:*:*:*
cpe:2.3:a:dominionvoting:imagecast_x:5.5.10.30:*:*:*:*:*:*:*
cpe:2.3:a:dominionvoting:imagecast_x:5.5.10.32:*:*:*:*:*:*:*

More vulnerabilities in Dominionvoting Imagecast X

CVE-2022-1746 — High (CVSS 7.6): The authentication mechanism used by poll workers to administer voting using the tested version of Dominion Voting…
CVE-2022-1745 — Medium (CVSS 6.8): The authentication mechanism used by technicians on the tested version of Dominion Voting Systems ImageCast X is…
CVE-2022-1744 — Medium (CVSS 6.8): Applications on the tested version of Dominion Voting Systems ImageCast X can execute code with elevated privileges by…
CVE-2022-1742 — Medium (CVSS 6.8): The tested version of Dominion Voting Systems ImageCast X allows for rebooting into Android Safe Mode, which allows an…
CVE-2022-1741 — Medium (CVSS 6.8): The tested version of Dominion Voting Systems ImageCast X has a Terminal Emulator application which could be leveraged…
CVE-2022-1739 — Medium (CVSS 6.8): The tested version of Dominion Voting Systems ImageCast X does not validate application signatures to a trusted root…

All CVEs affecting Dominionvoting Imagecast X →

Other CWE-24 vulnerabilities

CVE-2026-39813 — Critical (CVSS 9.8): A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through…
CVE-2026-49103 — Critical (CVSS 9.4): Webmin before 2.640 does not safely construct a filename for saving of an attachment within the mailboxes component.…
CVE-2025-61318 — Critical (CVSS 9.1): Emlog Pro 2.5.20 has an arbitrary file deletion vulnerability. This vulnerability stems from the admin/template.php…
CVE-2023-6699 — Critical (CVSS 9.1): The WP Compress – Image Optimizer [All-In-One] plugin for WordPress is vulnerable to Directory Traversal in all…
CVE-2025-54769 — High (CVSS 8.8): An authenticated, read-only user can upload a file and perform a directory traversal to have the uploaded file placed…
CVE-2025-60344 — High (CVSS 8.6): A path traversal (directory traversal) vulnerability in D-Link DSR series routers allows unauthenticated remote…

Browse all CWE-24 vulnerabilities →