CVE-2022-48506 describes a weak pseudorandom number generator in Dominion Voting Systems ImageCast Precinct and ImageCast Evolution scanners, specifically impacting Democracy Suite versions 5.2 through 5.15. This flaw allows an attacker to determine the order in which ballots were cast from public data, potentially deanonymizing voted ballots. The vulnerability has a low CVSS score of 2.4, indicating a physical attack vector and low impact on confidentiality, with no integrity or availability impact. There is no evidence of active exploitation, public exploit code, or significant community discussion or media coverage regarding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
5.2CPE matchmatch criteria | cpe:2.3:h:dominionvoting:democracy_suite:5.2:*:*:*:*:*:*:* | ||
5.4-nmCPE matchmatch criteria | cpe:2.3:h:dominionvoting:democracy_suite:5.4-nm:*:*:*:*:*:*:* | ||
5.5CPE matchmatch criteria | cpe:2.3:h:dominionvoting:democracy_suite:5.5:*:*:*:*:*:*:* | ||
5.5-aCPE matchmatch criteria | cpe:2.3:h:dominionvoting:democracy_suite:5.5-a:*:*:*:*:*:*:* | ||
5.5-bCPE matchmatch criteria | cpe:2.3:h:dominionvoting:democracy_suite:5.5-b:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.0 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.