Enhancing Vulnerability Assessments for Electronic Voting Systems through an Augmented CVSS 3.1 Model

This paper explores the application of the Common Vulnerability Scoring System (CVSS) to electronic voting systems, highlighting how unique considerations in these environments can be more accurately captured with an enhanced model. By incorporating criteria from the Voluntary Voting System Guidelines (VVSG), this research addresses the limitations of traditional IT-based evaluations in assessing vulnerabilities within electronic voting systems. The enhanced model was validated using a dataset of real-world vulnerabilities, showing significant improvements in accuracy and prioritization through statistical analyses. The findings offer a repeatable and extensible method for cybersecurity practitioners and election officials to assess operational risks and implement mitigation strategies to protect electrical integrity.