CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Feb 27, 2025

High

CISA KEV

CVE-2022-23748

Audinate—Dante Discovery

Dante Discovery contains a process control vulnerability in mDNSResponder.exe that all allows for a DLL sideloading attack. A local attacker can leverage this vulnerability in the Dante Application Library to execute arbitrary code.

Required Action

https://www.getdante.com/support/faq/audinate-response-to-dante-discovery-mdnsresponder-exe-security-issue-cve-2022-23748/ ; https://nvd.nist.gov/vuln/detail/CVE-2022-23748

Vulnerability Overview

Severity: High
CISA KEV: Yes
Ransomware: Unknown
Published: Feb 6, 2025
KEV Added: Feb 6, 2025
Due Date: Feb 27, 2025
Related Articles: 0

Vendor

Audinate

Dante Discovery