Actively exploited · Published Nov 17, 2022 · Assigned by checkpoint
CVE-2022-23748
High 7.8 Exploited
In plain English
A high-severity security flaw in Audinate Dante Application Library for Windows. Attackers are actively exploiting it in the wild (listed by CISA on February 6, 2025). The chance it is exploited in the next 30 days is estimated at 8.3% (higher than 95% of all known vulnerabilities). Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA guidance
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Federal agencies must remediate by Feb 27, 2025.
Official description
mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid and legitimate executable to load malicious files.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Audinate Dante Application Library for Windows | All versions prior to and including 1.2.0 |
Weakness: CWE-114 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H