VULNERABILITY INTELLIGENCE

CVE-2022-23748

CVSS score7.8 HIGH
EPSS probability8.33%
CISA KEVKnown exploited vulnerability
Published2022-11-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Dante Discovery Process Control Vulnerability

Vendor / product: Audinate / Dante Discovery

Description

mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid and legitimate executable to load malicious files.

Weakness classification

  • CWE-114: Process Control
  • CWE-426: Untrusted Search Path

Primary references