ZeroDay Findings
Sign inSign up

Findings

CVE-2022-23748

Dante Discovery Process Control Vulnerability

Published Nov 17, 2022 · updated Jun 16, 2026 · audinate dante application library

mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid and legitimate executable to load malicious files.

Timeline

Detection, updates, and resolution for this record.

  1. Nov 17, 2022 · Catalog

    Detected

    mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid and legitimate executable to load malicious files.

  2. Feb 6, 2025 · CISA KEV

    Known exploited

    Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

  3. Feb 27, 2025 · CISA KEV

    Remediation due

    Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

  4. Jun 16, 2026 · Catalog

    Updated

    mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid and legitimate executable to load malicious files.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CISA due date Feb 27, 2025

Affected

  • cpe audinate/dante application libraryversion unspecified
  • vendor Audinate Dante Discoveryversion unspecified

Sources

  • CISA KEVCVE-2022-23748

    Dante Discovery contains a process control vulnerability in mDNSResponder.exe that all allows for a DLL sideloading attack. A local attacker can leverage this vulnerability in the Dante Application Library to execute arbitrary code.

    cisa.gov
  • CVE.orgCVE-2022-23748

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2022-23748

    30-day exploitation probability 8.3%

    first.org
  • NIST NVDCVE-2022-23748

    mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid and legitimate executable to load malicious files.

    nvd.nist.gov

References