CVE-2022-1746CWE-266

2.2.8 INCORRECT PRIVILEGE ASSIGNMENT CWE-266

High · published June 24, 2022

CVSS v3.1
7.6
EPSS
0%
Percentile
20.1
In the wild
Unconfirmed
What it is

The authentication mechanism used by poll workers to administer voting using the tested version of Dominion Voting Systems ImageCast X can expose cryptographic secrets used to protect election information. An attacker could leverage this vulnerability to gain access to sensitive information and perform privileged actions, potentially affecting other election equipment.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00287 · 20.1th percentile
Weakness
CWE-266 · Incorrect Privilege Assignment
Published
2022-06-24T15:00Z
EPSS history
Timeline
  • 24 JUN 15:00Z
    2.2.8 INCORRECT PRIVILEGE ASSIGNMENT CWE-266
    cvelistv5