CVE-2022-23748
AU
Audinate Dante Discovery
Dante Discovery Process Control Vulnerability
What it is
Dante Discovery contains a process control vulnerability in mDNSResponder.exe that all allows for a DLL sideloading attack. A local attacker can leverage this vulnerability in the Dante Application Library to execute arbitrary code.
What to do
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Vendor notices and references
- www.getdante.com/support/faq/audinate-response-to-dante-discovery-mdnsresponder-exe-securi
- nvd.nist.gov/vuln/detail/CVE-2022-23748
Description and required action as published by CISA. Full record at NVD.