Dominionvoting Democracy Suite 5.5-a
Approved changes feed: RSS · Atom
cpe:2.3:h:dominionvoting:democracy_suite:5.5-a:*:*:*:*:*:*:*
part: h version: 5.5-a update: *
| Vendor | Dominionvoting (4012a67f-c17e-576e-ab35-db105cdcc773) |
|---|---|
| Product | Democracy Suite (7c93ac0c-8190-59cd-b91a-135372beadef) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-48506 |
vulnerable | 2026-06-08 05:51:34.660496 |
Details available
A flawed pseudorandom number generator in Dominion Voting Systems ImageCast Precinct (ICP and ICP2) and ImageCast Evolution (ICE) scanners allows anyone to determine the order in which ballots were cast from public ballot-level data, allowing deanonymization of voted ballots, in several types of scenarios. This issue was observed for use of the following versions of Democracy Suite: 5.2, 5.4-NM, 5.5, 5.5-A, 5.5-B, 5.5-C, 5.5-D, 5.7-A, 5.10, 5.10A, 5.15. NOTE: the Democracy Suite 5.17 EAC Certificate of Conformance mentions "Improved pseudo random number algorithm," which may be relevant.
Published: 2023-06-19T00:00:00.000Z
Updated: 2025-01-02T20:32:43.580Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1747 |
not_vulnerable | 2026-06-08 05:39:13.843320 |
Details available
The authentication mechanism used by voters to activate a voting session on the tested version of Dominion Voting Systems ImageCast X is susceptible to forgery. An attacker could leverage this vulnerability to print an arbitrary number of ballots without authorization.
Published: 2022-06-24T15:00:22.908Z
Updated: 2025-04-17T18:47:25.150Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1746 |
not_vulnerable | 2026-06-08 05:39:13.842503 |
2.2.8 INCORRECT PRIVILEGE ASSIGNMENT CWE-266
The authentication mechanism used by poll workers to administer voting using the tested version of Dominion Voting Systems ImageCast X can expose cryptographic secrets used to protect election information. An attacker could leverage this vulnerability to gain access to sensitive information and perform privileged actions, potentially affecting other election equipment.
Published: 2022-06-24T15:00:21.325Z
Updated: 2025-04-17T18:47:40.296Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1745 |
not_vulnerable | 2026-06-08 05:39:13.841748 |
2.2.7 AUTHENTICATION BYPASS BY SPOOFING CWE-290
The authentication mechanism used by technicians on the tested version of Dominion Voting Systems ImageCast X is susceptible to forgery. An attacker with physical access may use this to gain administrative privileges on a device and install malicious code or perform arbitrary administrative actions.
Published: 2022-06-24T15:00:27.944Z
Updated: 2025-04-17T18:46:41.583Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1744 |
not_vulnerable | 2026-06-08 05:39:13.840906 |
2.2.6 EXECUTION WITH UNNECESSARY PRIVILEGES CWE-250
Applications on the tested version of Dominion Voting Systems ImageCast X can execute code with elevated privileges by exploiting a system level service. An attacker could leverage this vulnerability to escalate privileges on a device and/or install malicious code.
Published: 2022-06-24T15:00:23.804Z
Updated: 2025-04-17T18:47:17.814Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1743 |
not_vulnerable | 2026-06-08 05:39:13.840057 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1742 |
not_vulnerable | 2026-06-08 05:39:13.835603 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1741 |
not_vulnerable | 2026-06-08 05:39:13.834947 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1740 |
not_vulnerable | 2026-06-08 05:39:13.834250 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1739 |
not_vulnerable | 2026-06-08 05:39:13.832235 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.