CVE-2022-23748VulnerabilityPublished 02/06/2025Updated 10/24/2026

CVE-2022-23748: Dante Discovery Process Control Vulnerability

Affects Audinate Dante DiscoverySource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 02/06/2025
KEV deadline: 02/27/2025
EPSS: 8.3% chance of exploitation in 30 days – higher than 94% of CVEs

What to do

CISA required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

getdante.com/support/faq/audinate-response-to-dante-discovery-mdnsresponder-exe-security-issue-cve-2022-23748/ (opens in a new tab)
nvd.nist.gov/vuln/detail/CVE-2022-23748 (opens in a new tab)

Description

Dante Discovery contains a process control vulnerability in mDNSResponder.exe that all allows for a DLL sideloading attack. A local attacker can leverage this vulnerability in the Dante Application Library to execute arbitrary code.

Weaknesses

CWE-114Unclassified weakness (opens in a new tab)

References

getdante.com/support/faq/audinate-response-to-dante-discovery-mdnsresponder-exe-security-issue-cve-2022-23748/ (opens in a new tab)
nvd.nist.gov/vuln/detail/CVE-2022-23748 (opens in a new tab)
cisa.gov/known-exploited-vulnerabilities-catalog?search=CVE-2022-23748 (opens in a new tab)

What to do

Description

Weaknesses

References

Related threats