A flawed pseudorandom number generator in Dominion Voting Systems ImageCast Precinct (ICP and ICP2) and ImageCast Evolution (ICE) scanners allows anyone to determine the order in which ballots were cast from public ballot-level data, allowing deanonymization of voted ballots, in several types of scenarios. This issue was observed for use of the following versions of Democracy Suite: 5.2, 5.4-NM, 5.5, 5.5-A, 5.5-B, 5.5-C, 5.5-D, 5.7-A, 5.10, 5.10A, 5.15. NOTE: the Democracy Suite 5.17 EAC Certificate of Conformance mentions "Improved pseudo random number algorithm," which may be relevant.
Published 2023-06-19 16:15:10
Updated 2025-01-02 21:15:08
Source MITRE
View at NVD,   CVE.org

Products affected by CVE-2022-48506

Exploit prediction scoring system (EPSS) score for CVE-2022-48506

0.07%
Probability of exploitation activity in the next 30 days EPSS Score History
~ 33 %
Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-48506

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Score Source First Seen
2.4
LOW CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
0.9
1.4
134c704f-9b21-4f2e-91b3-4a467353bcc0 2025-01-02
2.4
LOW CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
0.9
1.4
NIST

CWE ids for CVE-2022-48506

References for CVE-2022-48506

Jump to
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!