There are nine flaws affecting versions of the machine called the Dominion Voting Systems Democracy Suite ImageCast X, according to a copy of an advisory prepared by CISA and obtained by The Washington Post. The ImageCast X allows voters to mark their candidate choices on a touch-screen and then produce a paper record, as was the case in Georgia. It can also be used as a paperless electronic voting machine. The flaws, many of which are highly technical and which mostly stem from machine design as opposed to coding errors, generally require an attacker to have physical access to the devices or other equipment used to manage the election, CISA said.

“We have no evidence that these vulnerabilities have been exploited and no evidence that they have affected any election results,” said Brandon Wales, CISA’s executive director in a statement to The Post. “Of note, states’ standard election security procedures would detect exploitation of these vulnerabilities and in many cases would prevent attempts entirely. This makes it very unlikely that these vulnerabilities could affect an election.”

CISA conducted its review in response to a report by two researchers prepared as part of long-running litigation over the security of Georgia’s voting system.