title: 2.2.7    AUTHENTICATION BYPASS BY SPOOFING CWE-290
description: The authentication mechanism used by technicians on the tested version of Dominion Voting Systems ImageCast X is susceptible to forgery. An attacker with physical access may use this to gain administrative privileges on a device and install malicious code or perform arbitrary administrative actions.
problem types: CWE-290 Authentication Bypass by Spoofing
affected:
{
product: ImageCast X application
vendor: Dominion Voting Systems
versions:
status: affected, version: Version 5.5-A Versions 5.5.10.30 and 5.5.10.32
}
{
product: ImageCast X firmware
vendor: Dominion Voting Systems
versions:
status: affected, version: Version 5.5-A
}
