title: 2.2.5    PATH TRAVERSAL: '../FILEDIR' CWE-24
description: The tested version of Dominion Voting System ImageCast X can be manipulated to cause arbitrary code execution by specially crafted election definition files. An attacker could leverage this vulnerability to spread malicious code to ImageCast X devices from the EMS.
problem types: CWE-24
affected:
{
product: ImageCast X application
vendor: Dominion Voting System
versions:
status: affected, version: Version 5.5-A Versions 5.5.10.30 and 5.5.10.32
}
{
product: ImageCast X firmware
vendor: Dominion Voting System
versions:
status: affected, version: Version 5.5-A
}
