CVE-2022-23748
High 7.8 Exploited in the wild (KEV)
Confirmed active exploitation — CISA KEV catalog
- Name
- Dante Discovery Process Control Vulnerability
- Added to catalog
- Remediation due date (US federal)
- Required action
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Description
mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid and legitimate executable to load malicious files.
Metrics
- CVSS 3.1
-
7.8 (HIGH)
Score source: NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS — exploit probability
- 8% (percentile: 95) as of 2 November 2026
- CWE
- CWE-114, CWE-426
Affected products
audinate: dante application library; microsoft: windows
References
- https://www.audinate.com/learning/faqs/audinate-response-to-dante-discovery-mdn… Vendor Advisory
- https://www.audinate.com/learning/faqs/audinate-response-to-dante-discovery-mdn… Vendor Advisory
- https://cpr-zero.checkpoint.com/vulns/cprid-2193/%2C Broken Link
- https://cpr-zero.checkpoint.com/vulns/cprid-2193/%2C Broken Link
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022… US Government Resource