CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HCVE-2022-23748
High (7.8) in Audinate Dante Discovery. In CISA KEV since 2025-02-06. EPSS 8.3% chance of exploitation in the next 30 days.
mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid and legitimate executable to load malicious files.
Severity
- EPSS
- 8.3% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
- CISA KEV
- listed 2025-02-06, due 2025-02-27
- CWEs
- CWE-426, CWE-114
- Published
- Modified
- Record from
- the NVD, synced
Affected
- audinate:dante_application_library
References
- https://cpr-zero.checkpoint.com/vulns/cprid-2193/%2C
- https://www.audinate.com/learning/faqs/audinate-response-to-dante-discovery-mdnsresponder-exe-security-issue-cve-2022-23748
- https://cpr-zero.checkpoint.com/vulns/cprid-2193/%2C
- https://www.audinate.com/learning/faqs/audinate-response-to-dante-discovery-mdnsresponder-exe-security-issue-cve-2022-23748
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-23748