CVE-2022-1746 - CVE House
Back to Database
Status published Unknown CVE-2022-1746

2.2.8 INCORRECT PRIVILEGE ASSIGNMENT CWE-266

Vulnerability Description

The authentication mechanism used by poll workers to administer voting using the tested version of Dominion Voting Systems ImageCast X can expose cryptographic secrets used to protect election information. An attacker could leverage this vulnerability to gain access to sensitive information and perform privileged actions, potentially affecting other election equipment.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-1746

Credits & Attribution

No credits recorded in the NVD database.

References

More from Dominion Voting Systems

View All →
CVE-2022-1747
The authentication mechanism used by voters to activate a voting...
Unknown 0
CVE-2022-1745
2.2.7 AUTHENTICATION BYPASS BY SPOOFING CWE-290
Unknown 0
CVE-2022-1742
2.2.4 IMPROPER PROTECTION OF ALTERNATE PATH CWE-424
Unknown 0
CVE-2022-1741
2.2.3 HIDDEN FUNCTIONALITY CWE-912
Unknown 0
CVE-2022-1740
2.2.2 MUTABLE ATTESTATION OR MEASUREMENT REPORTING DATA CWE-1283
Unknown 0

Affected Vendor

Dominion Voting Systems

View all reports →

Affected Software

ImageCast X application, ImageCast X firmware
Vulnerable Versions:
Version 5.5-A Versions 5.5.10.30 and 5.5.10.32, Version 5.5-A

Timeline

Official Publish: June 24th, 2022
Last Modified: April 17th, 2025
Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

CWE-266

MITRE ATT&CK TTPs

T1078 Valid Accounts
Persistence
T1098 Account Manipulation
Privilege Escalation
T1548 Abuse Elevation Control Mechanism
Privilege Escalation
T1484 Domain or Tenant Policy Modification
Defense Evasion
T1021 Remote Services
Lateral Movement