2.2.7 AUTHENTICATION BYPASS BY SPOOFING CWE-290

The authentication mechanism used by technicians on the tested version of Dominion Voting Systems ImageCast X is susceptible to forgery. An attacker with physical access may use this to gain administrative privileges on a device and install malicious code or perform arbitrary administrative actions.

N/A

使用欺骗进行的认证绕过

Dominion Voting Systems ImageCast X 安全漏洞

Dominion Voting Systems ImageCast X是Dominion Voting Systems公司的直观且可配置的面对面投票解决方案。 Dominion Voting Systems ImageCast X 存在安全漏洞，该漏洞源于通过欺骗绕过身份验证。攻击者利用该漏洞可获得设备的管理权限并安装恶意代码或执行任意管理操作。

N/A

N/A