{"id":"CVE-2022-23748","aliases":["EUVD-2022-28684","GHSA-rc8f-8m86-p4vm"],"status":"published","title":"mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to...","description":"mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid and legitimate executable to load malicious files.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.08329,"percentile":0.94987,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":false,"fix_available":false},"cwes":["CWE-114","CWE-426"],"published":"2022-11-17T00:00:00Z","modified":"2026-06-17T04:30:45Z","kev":{"date_added":"2025-02-06","due_date":"2025-02-27","required_action":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2025-02-06"},{"source":"kev","since":"2025-02-06"}],"products":[{"vendor":"audinate","product":"dante discovery"},{"vendor":"audinate","product":"dante_application_library"}],"references":[{"url":"https://cpr-zero.checkpoint.com/vulns/cprid-2193/%2C","tags":["x_transferred","Broken Link"]},{"url":"https://www.audinate.com/learning/faqs/audinate-response-to-dante-discovery-mdnsresponder-exe-security-issue-cve-2022-23748","tags":["x_transferred","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-23748","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23748"},{"url":"https://cpr-zero.checkpoint.com/vulns/cprid-2193/,"},{"url":"https://cpr-zero.checkpoint.com/vulns/cprid-2193"},{"url":"https://github.com/advisories/GHSA-rc8f-8m86-p4vm"}],"sources":{"cve":[{"id":"CVE-2022-23748","description":"mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid and legitimate executable to load malicious files.","status":"published","published":"2022-11-17T00:00:00Z","modified":"2025-10-21T23:15:31.225Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-114"],"updated_at":"2026-11-02T14:34:29.842547Z"}],"euvd":[{"id":"EUVD-2022-28684","description":"mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid and legitimate executable to load malicious files.","status":"published","published":"2022-11-17T00:00:00Z","modified":"2025-10-21T23:15:31Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"exploited_since":"2025-02-06","updated_at":"2026-11-02T20:31:26.48918Z"}],"ghsa":[{"id":"GHSA-rc8f-8m86-p4vm","title":"mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to...","description":"mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid and legitimate executable to load malicious files.","status":"published","published":"2022-11-18T00:30:19Z","modified":"2025-10-22T00:32:38Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-114","CWE-426"],"updated_at":"2026-11-02T15:04:05.954742Z"}],"kev":[{"id":"CVE-2022-23748","title":"Dante Discovery Process Control Vulnerability","description":"Dante Discovery contains a process control vulnerability in mDNSResponder.exe that all allows for a DLL sideloading attack. A local attacker can leverage this vulnerability in the Dante Application Library to execute arbitrary code.","cwes":["CWE-114"],"kev":{"date_added":"2025-02-06","due_date":"2025-02-27","required_action":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.234141Z"}],"nvd":[{"id":"CVE-2022-23748","description":"mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid and legitimate executable to load malicious files.","status":"published","published":"2022-11-17T23:15:14.383Z","modified":"2026-06-17T04:30:45.16Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-114","CWE-426"],"updated_at":"2026-11-02T14:07:32.395456Z"}]}}