{"id":"CVE-2022-23748","kind":"vulnerability","aliases":["CVE-2022-23748"],"related":[],"title":"audinate dante application library: mDNSResponder.exe is vulnerable to DLL Sideloading attack","description":"Dante Discovery contains a process control vulnerability in mDNSResponder.exe that all allows for a DLL sideloading attack. A local attacker can leverage this vulnerability in the Dante Application Library to execute arbitrary code.\n\nCISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","summary":"Audinate Dante Discovery's mDNSResponder.exe can be tricked into loading a malicious DLL from an attacker-chosen location (DLL sideloading). A local attacker can use this to run arbitrary code.","severity":"high","cvss":7.8,"epss":null,"exploited":true,"exploited_at":"2025-02-06T00:00:00+00:00","products":[{"name":"Audinate Dante Discovery","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"audinate dante application library","fixed":[],"affected":"<= 1.2.0","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["audio-networking","dante","exploited","infrastructure","windows"],"not_affected_if":["not-installed-dante-discovery"],"how_to_check":null,"fix":"Apply the mitigations from the vendor (Audinate), or stop using Dante Discovery if no mitigation is available, as CISA requires.","status":"open","published_at":"2022-11-17T23:15:14+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T20:52:30+00:00","updated_at":"2026-10-23T22:29:05+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-23T20:52:30Z","model":"claude-haiku-5-5","output":{"fix":"Apply the mitigations from the vendor (Audinate), or stop using Dante Discovery if no mitigation is available, as CISA requires.","reach":"local","impact":"high","summary":"Audinate Dante Discovery's mDNSResponder.exe can be tricked into loading a malicious DLL from an attacker-chosen location (DLL sideloading). A local attacker can use this to run arbitrary code.","category":"infrastructure","who_cares":["windows","audio-networking","dante"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Attacker runs arbitrary code locally on the Windows machine running Dante","analyst_note":"Get Audinate's advisory and the affected/fixed version list for Dante Discovery; sources give no versions or check steps (see CISA KEV entry for CVE-2022-23748).","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["not-installed-dante-discovery"],"user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000452,"input_tokens":2648,"output_tokens":374,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2022':13A,16A '-23748':14A,17A 'action':98C 'allow':74C 'appli':99C 'applic':3A,90C 'application':23A 'arbitrari':61B,94C 'attack':11A,48B,55B,79C,82C 'attacker-chosen':47B 'audin':1A,32B 'audinate':18A,21A 'audio':26B 'audio-network':25B 'chosen':49B 'cisa':96C 'code':62B,95C 'contain':65C 'control':68C 'cve':12A,15A 'dant':2A,28B,33B,63C,89C 'dante':19A,22A 'discontinu':105C 'discoveri':34B,64C 'discovery':20A 'dll':9A,44B,51B,77C 'execut':93C 'exploit':29B 'infrastructur':30B 'instruct':103C 'leverag':84C 'librari':4A,91C 'library':24A 'load':41B 'local':54B,81C 'locat':50B 'malici':43B 'mdnsresponder.exe':5A,36B,71C 'mitig':100C,111C 'network':27B 'per':101C 'process':67C 'product':109C 'requir':97C 'run':60B 'sideload':10A,52B,78C 'trick':39B 'unavail':113C 'use':57B,106C 'vendor':102C 'vulner':7A,69C,86C 'window':31B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2022-11-17T23:15:14+00:00","kev":{"dateAdded":"2025-02-06","dueDate":"2025-02-27","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2022-23748","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-23748","severity":null,"published_at":"2025-02-06T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T11:39:14+00:00","note":null},{"source":"nvd","external_id":"CVE-2022-23748","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23748","severity":null,"published_at":"2022-11-17T23:15:14+00:00","modified_at":"2026-06-17T04:30:45+00:00","first_seen_at":"2026-10-23T22:29:05+00:00","fetched_at":"2026-10-23T22:29:05+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}